ETSF2(r0, 0x560a, &(0x7f0000000040)={0x0, 0x401, 0xfdfdffff, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2000}) 14:58:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560b, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5415, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x80087601, 0x0) 14:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5416, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3300.873884][T11764] FAULT_INJECTION: forcing a failure. [ 3300.873884][T11764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3300.887151][T11764] CPU: 0 PID: 11764 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3300.898880][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3300.898934][T11764] Call Trace: [ 3300.898938][T11764] [ 3300.898942][T11764] dump_stack_lvl+0xda/0x130 [ 3300.898980][T11764] dump_stack+0x15/0x20 [ 3300.899034][T11764] should_fail_ex+0x21f/0x230 [ 3300.899127][T11764] __should_fail_alloc_page+0xfd/0x110 [ 3300.899141][T11764] __alloc_pages+0x108/0x340 [ 3300.899155][T11764] vma_alloc_folio+0x6a3/0x8c0 [ 3300.899224][T11764] shmem_get_folio_gfp+0x801/0x1200 [ 3300.899241][T11764] shmem_write_begin+0xa6/0x1d0 [ 3300.899297][T11764] generic_perform_write+0x1cf/0x410 [ 3300.899314][T11764] ? shmem_write_begin+0x1d0/0x1d0 [ 3300.899327][T11764] __generic_file_write_iter+0xa1/0x120 [ 3300.899344][T11764] generic_file_write_iter+0x7d/0x1c0 [ 3300.899360][T11764] vfs_write+0x4ab/0x7d0 [ 3300.899377][T11764] ksys_write+0xeb/0x1a0 [ 3300.899393][T11764] __x64_sys_write+0x42/0x50 [ 3300.899487][T11764] do_syscall_64+0x41/0xc0 [ 3300.899509][T11764] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3300.998598][T11764] RIP: 0033:0x7ff0343a5ae9 [ 3301.003017][T11764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:16 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 15) 14:58:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x801c581f, 0x0) 14:58:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5800, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5800, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) ioctl$KIOCSOUND(r0, 0x4b2f, 0x80000000) ioctl$TCSETSF2(r0, 0x560a, &(0x7f0000000040)={0x0, 0x401, 0xfdfdffff, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2000}) 14:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5417, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (fail_nth: 1) 14:58:16 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0xc0045878, 0x0) [ 3301.022803][T11764] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3301.031315][T11764] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3301.031329][T11764] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3301.031342][T11764] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.031356][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3301.031368][T11764] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3301.071233][T11764] 14:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5418, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3301.117212][T11796] FAULT_INJECTION: forcing a failure. [ 3301.117212][T11796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.125883][T11794] FAULT_INJECTION: forcing a failure. [ 3301.125883][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.130315][T11796] CPU: 1 PID: 11796 Comm: syz-executor.5 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3301.153794][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3301.163848][T11796] Call Trace: [ 3301.167118][T11796] [ 3301.170108][T11796] dump_stack_lvl+0xda/0x130 [ 3301.174724][T11796] dump_stack+0x15/0x20 [ 3301.178877][T11796] should_fail_ex+0x21f/0x230 [ 3301.183549][T11796] should_fail+0xb/0x10 [ 3301.187695][T11796] should_fail_usercopy+0x1a/0x20 [ 3301.192717][T11796] _copy_from_user+0x1e/0xd0 [ 3301.197298][T11796] copy_msghdr_from_user+0x54/0x2a0 [ 3301.202499][T11796] __sys_sendmsg+0x17d/0x270 [ 3301.207096][T11796] __x64_sys_sendmsg+0x46/0x50 [ 3301.211887][T11796] do_syscall_64+0x41/0xc0 [ 3301.216304][T11796] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.222213][T11796] RIP: 0033:0x7fdb3a558ae9 [ 3301.226621][T11796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3301.246254][T11796] RSP: 002b:00007fdb398db0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3301.254785][T11796] RAX: ffffffffffffffda RBX: 00007fdb3a677f80 RCX: 00007fdb3a558ae9 14:58:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:16 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (fail_nth: 2) [ 3301.262798][T11796] RDX: 0000000004008051 RSI: 00000000200001c0 RDI: 0000000000000003 [ 3301.270820][T11796] RBP: 00007fdb398db120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.278782][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3301.286753][T11796] R13: 000000000000000b R14: 00007fdb3a677f80 R15: 00007ffd0be98b88 [ 3301.294717][T11796] [ 3301.297755][T11794] CPU: 0 PID: 11794 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3301.308180][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3301.318249][T11794] Call Trace: [ 3301.321537][T11794] [ 3301.323670][T11801] FAULT_INJECTION: forcing a failure. [ 3301.323670][T11801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.324532][T11794] dump_stack_lvl+0xda/0x130 [ 3301.324585][T11794] dump_stack+0x15/0x20 [ 3301.324605][T11794] should_fail_ex+0x21f/0x230 [ 3301.324625][T11794] should_fail+0xb/0x10 [ 3301.355194][T11794] should_fail_usercopy+0x1a/0x20 [ 3301.360303][T11794] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3301.366055][T11794] ? folio_test_hugetlb+0x3a/0x70 [ 3301.371542][T11794] ? shmem_write_begin+0x12a/0x1d0 [ 3301.376653][T11794] generic_perform_write+0x212/0x410 [ 3301.381942][T11794] ? shmem_write_begin+0x1d0/0x1d0 [ 3301.387051][T11794] __generic_file_write_iter+0xa1/0x120 [ 3301.392729][T11794] generic_file_write_iter+0x7d/0x1c0 [ 3301.398099][T11794] vfs_write+0x4ab/0x7d0 [ 3301.402343][T11794] ksys_write+0xeb/0x1a0 [ 3301.406589][T11794] __x64_sys_write+0x42/0x50 [ 3301.411226][T11794] do_syscall_64+0x41/0xc0 [ 3301.415648][T11794] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.421627][T11794] RIP: 0033:0x7ff0343a5ae9 [ 3301.426112][T11794] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3301.445721][T11794] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3301.454196][T11794] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3301.462160][T11794] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3301.470179][T11794] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.478199][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3301.486160][T11794] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3301.494132][T11794] [ 3301.497177][T11801] CPU: 1 PID: 11801 Comm: syz-executor.5 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3301.507684][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3301.517755][T11801] Call Trace: [ 3301.517762][T11801] [ 3301.517770][T11801] dump_stack_lvl+0xda/0x130 [ 3301.528530][T11801] dump_stack+0x15/0x20 [ 3301.532779][T11801] should_fail_ex+0x21f/0x230 [ 3301.537561][T11801] should_fail+0xb/0x10 [ 3301.541793][T11801] should_fail_usercopy+0x1a/0x20 [ 3301.546839][T11801] _copy_from_user+0x1e/0xd0 [ 3301.551450][T11801] move_addr_to_kernel+0x82/0x110 [ 3301.551489][T11801] copy_msghdr_from_user+0x26d/0x2a0 [ 3301.551520][T11801] __sys_sendmsg+0x17d/0x270 [ 3301.551586][T11801] __x64_sys_sendmsg+0x46/0x50 [ 3301.551620][T11801] do_syscall_64+0x41/0xc0 [ 3301.551641][T11801] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.551675][T11801] RIP: 0033:0x7fdb3a558ae9 14:58:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 16) 14:58:17 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (fail_nth: 3) 14:58:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3301.551689][T11801] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3301.551709][T11801] RSP: 002b:00007fdb398db0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3301.551729][T11801] RAX: ffffffffffffffda RBX: 00007fdb3a677f80 RCX: 00007fdb3a558ae9 [ 3301.551743][T11801] RDX: 0000000004008051 RSI: 00000000200001c0 RDI: 0000000000000003 [ 3301.551758][T11801] RBP: 00007fdb398db120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.551847][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541b, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3301.551861][T11801] R13: 000000000000000b R14: 00007fdb3a677f80 R15: 00007ffd0be98b88 [ 3301.551878][T11801] [ 3301.680325][T11814] FAULT_INJECTION: forcing a failure. [ 3301.680325][T11814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3301.693738][T11814] CPU: 0 PID: 11814 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3301.704159][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3301.712123][T11819] FAULT_INJECTION: forcing a failure. [ 3301.712123][T11819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3301.714287][T11814] Call Trace: [ 3301.714294][T11814] [ 3301.714301][T11814] dump_stack_lvl+0xda/0x130 [ 3301.738294][T11814] dump_stack+0x15/0x20 [ 3301.742533][T11814] should_fail_ex+0x21f/0x230 [ 3301.747208][T11814] __should_fail_alloc_page+0xfd/0x110 [ 3301.752715][T11814] __alloc_pages+0x108/0x340 [ 3301.757326][T11814] vma_alloc_folio+0x6a3/0x8c0 [ 3301.762107][T11814] shmem_get_folio_gfp+0x801/0x1200 [ 3301.767321][T11814] shmem_write_begin+0xa6/0x1d0 [ 3301.772289][T11814] generic_perform_write+0x1cf/0x410 [ 3301.777580][T11814] ? shmem_write_begin+0x1d0/0x1d0 [ 3301.782742][T11814] __generic_file_write_iter+0xa1/0x120 [ 3301.788325][T11814] generic_file_write_iter+0x7d/0x1c0 [ 3301.793757][T11814] vfs_write+0x4ab/0x7d0 [ 3301.798096][T11814] ksys_write+0xeb/0x1a0 [ 3301.802350][T11814] __x64_sys_write+0x42/0x50 [ 3301.806973][T11814] do_syscall_64+0x41/0xc0 [ 3301.811590][T11814] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.817600][T11814] RIP: 0033:0x7ff0343a5ae9 [ 3301.822044][T11814] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3301.841666][T11814] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3301.850160][T11814] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3301.858219][T11814] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3301.866277][T11814] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.874271][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3301.882248][T11814] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3301.890214][T11814] [ 3301.893273][T11819] CPU: 1 PID: 11819 Comm: syz-executor.5 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3301.903699][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3301.913765][T11819] Call Trace: [ 3301.917073][T11819] 14:58:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 17) 14:58:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0xc0045878, 0x0) 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541e, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560e, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3301.920010][T11819] dump_stack_lvl+0xda/0x130 [ 3301.924614][T11819] dump_stack+0x15/0x20 [ 3301.928852][T11819] should_fail_ex+0x21f/0x230 [ 3301.933599][T11819] should_fail+0xb/0x10 [ 3301.937784][T11819] should_fail_usercopy+0x1a/0x20 [ 3301.942816][T11819] _copy_to_user+0x1e/0x90 [ 3301.947321][T11819] simple_read_from_buffer+0xa0/0x110 [ 3301.947410][T11819] proc_fail_nth_read+0xfc/0x140 [ 3301.947455][T11819] ? proc_fault_inject_write+0x210/0x210 14:58:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0xc0189436, 0x0) 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541e, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x2, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3301.947496][T11819] vfs_read+0x19f/0x5c0 [ 3301.947522][T11819] ? __fget_files+0x1c4/0x200 [ 3301.947552][T11819] ? mutex_lock+0xd/0x30 [ 3301.947576][T11819] ksys_read+0xeb/0x1a0 [ 3301.947669][T11819] __x64_sys_read+0x42/0x50 [ 3301.947699][T11819] do_syscall_64+0x41/0xc0 [ 3301.947728][T11819] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3301.947759][T11819] RIP: 0033:0x7fdb3a55778c 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5421, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3301.947776][T11819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3301.947875][T11819] RSP: 002b:00007fdb398db0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3301.947896][T11819] RAX: ffffffffffffffda RBX: 00007fdb3a677f80 RCX: 00007fdb3a55778c [ 3301.947910][T11819] RDX: 000000000000000f RSI: 00007fdb398db130 RDI: 0000000000000004 [ 3301.947936][T11819] RBP: 00007fdb398db120 R08: 0000000000000000 R09: 0000000000000000 [ 3301.947949][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3301.948003][T11819] R13: 000000000000000b R14: 00007fdb3a677f80 R15: 00007ffd0be98b88 [ 3301.948018][T11819] [ 3301.980769][T11828] FAULT_INJECTION: forcing a failure. [ 3301.980769][T11828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3302.091390][T11828] CPU: 0 PID: 11828 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3302.091405][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3302.091413][T11828] Call Trace: [ 3302.091417][T11828] 14:58:17 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5422, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x3, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3302.091463][T11828] dump_stack_lvl+0xda/0x130 [ 3302.091481][T11828] dump_stack+0x15/0x20 [ 3302.091494][T11828] should_fail_ex+0x21f/0x230 [ 3302.091568][T11828] should_fail+0xb/0x10 [ 3302.091589][T11828] should_fail_usercopy+0x1a/0x20 [ 3302.091610][T11828] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3302.146928][T11828] ? folio_test_hugetlb+0x3a/0x70 [ 3302.152006][T11828] ? shmem_write_begin+0x12a/0x1d0 [ 3302.157201][T11828] generic_perform_write+0x212/0x410 [ 3302.162517][T11828] ? shmem_write_begin+0x1d0/0x1d0 [ 3302.167641][T11828] __generic_file_write_iter+0xa1/0x120 [ 3302.173225][T11828] generic_file_write_iter+0x7d/0x1c0 [ 3302.178627][T11828] vfs_write+0x4ab/0x7d0 [ 3302.182935][T11828] ksys_write+0xeb/0x1a0 [ 3302.187202][T11828] __x64_sys_write+0x42/0x50 [ 3302.191856][T11828] do_syscall_64+0x41/0xc0 [ 3302.196279][T11828] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3302.202297][T11828] RIP: 0033:0x7ff0343a5ae9 [ 3302.206728][T11828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3302.226358][T11828] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3302.234833][T11828] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3302.242889][T11828] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3302.251125][T11828] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3302.259158][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3302.267132][T11828] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3302.275090][T11828] 14:58:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 18) 14:58:17 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0xc020660b, 0x0) 14:58:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3302.386844][T11850] FAULT_INJECTION: forcing a failure. [ 3302.386844][T11850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3302.400555][T11850] CPU: 0 PID: 11850 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3302.411027][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3302.421312][T11850] Call Trace: [ 3302.424622][T11850] [ 3302.427538][T11850] dump_stack_lvl+0xda/0x130 [ 3302.432205][T11850] dump_stack+0x15/0x20 [ 3302.436393][T11850] should_fail_ex+0x21f/0x230 [ 3302.441052][T11850] __should_fail_alloc_page+0xfd/0x110 [ 3302.446541][T11850] __alloc_pages+0x108/0x340 [ 3302.451131][T11850] vma_alloc_folio+0x6a3/0x8c0 [ 3302.455973][T11850] shmem_get_folio_gfp+0x801/0x1200 [ 3302.461231][T11850] shmem_write_begin+0xa6/0x1d0 [ 3302.466206][T11850] generic_perform_write+0x1cf/0x410 [ 3302.471565][T11850] ? shmem_write_begin+0x1d0/0x1d0 [ 3302.476747][T11850] __generic_file_write_iter+0xa1/0x120 [ 3302.482638][T11850] generic_file_write_iter+0x7d/0x1c0 [ 3302.488011][T11850] vfs_write+0x4ab/0x7d0 [ 3302.492317][T11850] ksys_write+0xeb/0x1a0 [ 3302.496550][T11850] __x64_sys_write+0x42/0x50 [ 3302.501304][T11850] do_syscall_64+0x41/0xc0 [ 3302.505811][T11850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3302.511699][T11850] RIP: 0033:0x7ff0343a5ae9 [ 3302.516161][T11850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3302.535808][T11850] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3302.544257][T11850] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3302.552220][T11850] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3302.560253][T11850] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3302.568270][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3302.576220][T11850] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3302.584177][T11850] 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560f, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304400300000010630840000000000000000003630840", @ANYRES64=0x0, @ANYBLOB="10630840000000000000000007630440030000000563040001000000f9d9d1abfd2cffb33ed8ee099d0d58bd038a0bad9b88e1aa57e6c8c88f25dbd303861f2d7f79fe9955f3533f3617118d6af5c6182c2b491946e5bf566a42d028050a0741899f178cb5200d5ee6a6eea300ab563f0bc40bdea062d88fe002a4d1b9e93659"], 0xb7, 0x0, &(0x7f00000000c0)="75ecdc0c85351da87501e539162865d17014e8185814df2ea587116638fd4a3deb19e7db05d9f0bdb81557af78d8f09aab2255a93f2da947aac96f81d4b2e6e98e04b8c83b92c2dcdf9461f1c217b0d26c0c71ad32181b6569097830dfeb8889db4ac492638045117b894860ba76f0d0988f0851e8c115fe23369c946517ac6236717d461830fdb5ef64caf219cae411ad9c12c5d2a70629a71a0d654a742a218544dbb282debf817d945de59ac5c8275ee165862bf1fb"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x5, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 19) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5424, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40049409, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5425, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40086602, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3302.796960][T11861] FAULT_INJECTION: forcing a failure. [ 3302.796960][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3302.810057][T11861] CPU: 1 PID: 11861 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3302.820493][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3302.830558][T11861] Call Trace: [ 3302.833837][T11861] [ 3302.836847][T11861] dump_stack_lvl+0xda/0x130 [ 3302.841512][T11861] dump_stack+0x15/0x20 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5427, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40087602, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304400300000010630840000000000000000003630840", @ANYRES64=0x0, @ANYBLOB="10630840000000000000000007630440030000000563040001000000f9d9d1abfd2cffb33ed8ee099d0d58bd038a0bad9b88e1aa57e6c8c88f25dbd303861f2d7f79fe9955f3533f3617118d6af5c6182c2b491946e5bf566a42d028050a0741899f178cb5200d5ee6a6eea300ab563f0bc40bdea062d88fe002a4d1b9e93659"], 0xb7, 0x0, &(0x7f00000000c0)="75ecdc0c85351da87501e539162865d17014e8185814df2ea587116638fd4a3deb19e7db05d9f0bdb81557af78d8f09aab2255a93f2da947aac96f81d4b2e6e98e04b8c83b92c2dcdf9461f1c217b0d26c0c71ad32181b6569097830dfeb8889db4ac492638045117b894860ba76f0d0988f0851e8c115fe23369c946517ac6236717d461830fdb5ef64caf219cae411ad9c12c5d2a70629a71a0d654a742a218544dbb282debf817d945de59ac5c8275ee165862bf1fb"}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3302.845697][T11861] should_fail_ex+0x21f/0x230 [ 3302.850393][T11861] should_fail+0xb/0x10 [ 3302.854554][T11861] should_fail_usercopy+0x1a/0x20 [ 3302.859594][T11861] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3302.865386][T11861] ? folio_test_hugetlb+0x3a/0x70 [ 3302.870425][T11861] ? shmem_write_begin+0x12a/0x1d0 [ 3302.875592][T11861] generic_perform_write+0x212/0x410 [ 3302.880893][T11861] ? shmem_write_begin+0x1d0/0x1d0 [ 3302.886018][T11861] __generic_file_write_iter+0xa1/0x120 [ 3302.891647][T11861] generic_file_write_iter+0x7d/0x1c0 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4020940d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x6, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3302.897094][T11861] vfs_write+0x4ab/0x7d0 [ 3302.901350][T11861] ksys_write+0xeb/0x1a0 [ 3302.905653][T11861] __x64_sys_write+0x42/0x50 [ 3302.910259][T11861] do_syscall_64+0x41/0xc0 [ 3302.914830][T11861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3302.920861][T11861] RIP: 0033:0x7ff0343a5ae9 [ 3302.925278][T11861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3302.944956][T11861] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3302.953456][T11861] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3302.961434][T11861] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3302.969455][T11861] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3302.977581][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3302.985556][T11861] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3302.993553][T11861] 14:58:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 20) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x7, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80045432, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5428, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, 0x0) 14:58:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304400300000010630840000000000000000003630840", @ANYRES64=0x0, @ANYBLOB="10630840000000000000000007630440030000000563040001000000f9d9d1abfd2cffb33ed8ee099d0d58bd038a0bad9b88e1aa57e6c8c88f25dbd303861f2d7f79fe9955f3533f3617118d6af5c6182c2b491946e5bf566a42d028050a0741899f178cb5200d5ee6a6eea300ab563f0bc40bdea062d88fe002a4d1b9e93659"], 0xb7, 0x0, &(0x7f00000000c0)="75ecdc0c85351da87501e539162865d17014e8185814df2ea587116638fd4a3deb19e7db05d9f0bdb81557af78d8f09aab2255a93f2da947aac96f81d4b2e6e98e04b8c83b92c2dcdf9461f1c217b0d26c0c71ad32181b6569097830dfeb8889db4ac492638045117b894860ba76f0d0988f0851e8c115fe23369c946517ac6236717d461830fdb5ef64caf219cae411ad9c12c5d2a70629a71a0d654a742a218544dbb282debf817d945de59ac5c8275ee165862bf1fb"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$VT_WAITACTIVE(r2, 0x5607) (async, rerun: 64) ioctl$TCSETSW2(r1, 0x5453, 0x0) (rerun: 64) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x8, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5429, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, 0x0) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80045440, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5437, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3303.132402][T11902] FAULT_INJECTION: forcing a failure. [ 3303.132402][T11902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3303.145888][T11902] CPU: 1 PID: 11902 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3303.156307][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3303.166368][T11902] Call Trace: [ 3303.169710][T11902] [ 3303.172717][T11902] dump_stack_lvl+0xda/0x130 [ 3303.177321][T11902] dump_stack+0x15/0x20 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5441, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3303.181512][T11902] should_fail_ex+0x21f/0x230 [ 3303.186292][T11902] __should_fail_alloc_page+0xfd/0x110 [ 3303.191775][T11902] __alloc_pages+0x108/0x340 [ 3303.196443][T11902] vma_alloc_folio+0x6a3/0x8c0 [ 3303.201376][T11902] shmem_get_folio_gfp+0x801/0x1200 [ 3303.206784][T11902] shmem_write_begin+0xa6/0x1d0 [ 3303.211766][T11902] generic_perform_write+0x1cf/0x410 [ 3303.217178][T11902] ? shmem_write_begin+0x1d0/0x1d0 [ 3303.222858][T11902] __generic_file_write_iter+0xa1/0x120 [ 3303.228539][T11902] generic_file_write_iter+0x7d/0x1c0 [ 3303.234201][T11902] vfs_write+0x4ab/0x7d0 [ 3303.238517][T11902] ksys_write+0xeb/0x1a0 [ 3303.242889][T11902] __x64_sys_write+0x42/0x50 [ 3303.247674][T11902] do_syscall_64+0x41/0xc0 [ 3303.252158][T11902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3303.258138][T11902] RIP: 0033:0x7ff0343a5ae9 [ 3303.262566][T11902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3303.282329][T11902] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3303.291060][T11902] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3303.299114][T11902] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3303.299129][T11902] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3303.299141][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.323102][T11902] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:18 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 21) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0x9, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0x0, 0x1}) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) 14:58:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, 0x0) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5450, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80086601, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3303.331279][T11902] 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5451, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) [ 3303.357325][T11925] FAULT_INJECTION: forcing a failure. [ 3303.357325][T11925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3303.370650][T11925] CPU: 1 PID: 11925 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3303.381068][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3303.391199][T11925] Call Trace: [ 3303.394511][T11925] [ 3303.397460][T11925] dump_stack_lvl+0xda/0x130 [ 3303.402214][T11925] dump_stack+0x15/0x20 14:58:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80087601, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:18 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3303.406385][T11925] should_fail_ex+0x21f/0x230 [ 3303.411143][T11925] should_fail+0xb/0x10 [ 3303.411165][T11925] should_fail_usercopy+0x1a/0x20 [ 3303.411185][T11925] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3303.411213][T11925] ? folio_test_hugetlb+0x3a/0x70 [ 3303.411260][T11925] ? shmem_write_begin+0x12a/0x1d0 [ 3303.411284][T11925] generic_perform_write+0x212/0x410 [ 3303.411316][T11925] ? shmem_write_begin+0x1d0/0x1d0 [ 3303.411339][T11925] __generic_file_write_iter+0xa1/0x120 [ 3303.411413][T11925] generic_file_write_iter+0x7d/0x1c0 [ 3303.411459][T11925] vfs_write+0x4ab/0x7d0 [ 3303.411504][T11925] ksys_write+0xeb/0x1a0 [ 3303.411591][T11925] __x64_sys_write+0x42/0x50 [ 3303.411618][T11925] do_syscall_64+0x41/0xc0 [ 3303.411639][T11925] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3303.411670][T11925] RIP: 0033:0x7ff0343a5ae9 [ 3303.411764][T11925] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3303.411781][T11925] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3303.411797][T11925] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3303.411812][T11925] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 22) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0x0, 0x1}) ioctl$TCSETSW2(r0, 0x5453, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) 14:58:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5452, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x3, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x801c581f, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x545d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3303.411826][T11925] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3303.411841][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.411907][T11925] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3303.411924][T11925] 14:58:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x2) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x1, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3303.612475][T11952] FAULT_INJECTION: forcing a failure. [ 3303.612475][T11952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3303.625735][T11952] CPU: 0 PID: 11952 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3303.636244][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3303.636263][T11952] Call Trace: [ 3303.636269][T11952] [ 3303.636276][T11952] dump_stack_lvl+0xda/0x130 [ 3303.636306][T11952] dump_stack+0x15/0x20 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x2) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x1, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x2) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x1, 0x1}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) (async) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x5, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3303.636376][T11952] should_fail_ex+0x21f/0x230 [ 3303.636397][T11952] __should_fail_alloc_page+0xfd/0x110 [ 3303.636421][T11952] __alloc_pages+0x108/0x340 [ 3303.636448][T11952] vma_alloc_folio+0x6a3/0x8c0 [ 3303.636489][T11952] shmem_get_folio_gfp+0x801/0x1200 [ 3303.636595][T11952] shmem_write_begin+0xa6/0x1d0 [ 3303.636617][T11952] generic_perform_write+0x1cf/0x410 [ 3303.636721][T11952] ? shmem_write_begin+0x1d0/0x1d0 [ 3303.636744][T11952] __generic_file_write_iter+0xa1/0x120 [ 3303.636771][T11952] generic_file_write_iter+0x7d/0x1c0 14:58:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 23) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x2) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x1, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x2) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x1, 0x1}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) (async) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x6, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5460, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x7, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3303.636805][T11952] vfs_write+0x4ab/0x7d0 [ 3303.717082][T11952] ksys_write+0xeb/0x1a0 [ 3303.721361][T11952] __x64_sys_write+0x42/0x50 [ 3303.726044][T11952] do_syscall_64+0x41/0xc0 [ 3303.726062][T11952] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3303.726149][T11952] RIP: 0033:0x7ff0343a5ae9 [ 3303.726158][T11952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3303.726169][T11952] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3303.726199][T11952] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3303.726207][T11952] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3303.726214][T11952] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x8, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40c200, 0x0) syz_open_pts(r0, 0x400) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40c200, 0x0) syz_open_pts(r0, 0x400) (async, rerun: 64) ioctl$TCSETSW2(r0, 0x5453, 0x0) (rerun: 64) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x9, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40c200, 0x0) syz_open_pts(r0, 0x400) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3303.726221][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.726229][T11952] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3303.726238][T11952] [ 3303.765788][T11990] FAULT_INJECTION: forcing a failure. [ 3303.765788][T11990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3303.842777][T11990] CPU: 1 PID: 11990 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3303.842823][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3303.842834][T11990] Call Trace: [ 3303.842840][T11990] [ 3303.842845][T11990] dump_stack_lvl+0xda/0x130 [ 3303.842876][T11990] dump_stack+0x15/0x20 [ 3303.842918][T11990] should_fail_ex+0x21f/0x230 [ 3303.842973][T11990] should_fail+0xb/0x10 [ 3303.842992][T11990] should_fail_usercopy+0x1a/0x20 [ 3303.843015][T11990] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3303.843095][T11990] ? folio_test_hugetlb+0x3a/0x70 [ 3303.843118][T11990] ? shmem_write_begin+0x12a/0x1d0 [ 3303.843141][T11990] generic_perform_write+0x212/0x410 [ 3303.843170][T11990] ? shmem_write_begin+0x1d0/0x1d0 [ 3303.843195][T11990] __generic_file_write_iter+0xa1/0x120 [ 3303.843240][T11990] generic_file_write_iter+0x7d/0x1c0 [ 3303.843280][T11990] vfs_write+0x4ab/0x7d0 [ 3303.843308][T11990] ksys_write+0xeb/0x1a0 14:58:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 24) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xa, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/17, 0x11}, {0x0}], 0x2, &(0x7f0000001380)=[{&(0x7f0000001200)=""/81, 0x51}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f00000004c0)=""/2, 0x2}], 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/10, 0xa}], 0xa, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/76, 0x4c}], 0x5, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7fffffff) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r7 = accept$phonet_pipe(r2, &(0x7f0000000380), &(0x7f0000000500)=0x10) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) [ 3303.843360][T11990] __x64_sys_write+0x42/0x50 [ 3303.843435][T11990] do_syscall_64+0x41/0xc0 [ 3303.843464][T11990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3303.843631][T11990] RIP: 0033:0x7ff0343a5ae9 [ 3303.843725][T11990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3303.843745][T11990] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3303.843766][T11990] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3303.843780][T11990] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3303.843841][T11990] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3303.843853][T11990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3303.843865][T11990] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3303.843879][T11990] [ 3304.005897][T12024] FAULT_INJECTION: forcing a failure. [ 3304.005897][T12024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3304.005924][T12024] CPU: 0 PID: 12024 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3304.005950][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3304.005963][T12024] Call Trace: [ 3304.005968][T12024] [ 3304.005974][T12024] dump_stack_lvl+0xda/0x130 [ 3304.005999][T12024] dump_stack+0x15/0x20 [ 3304.006080][T12024] should_fail_ex+0x21f/0x230 [ 3304.006201][T12024] __should_fail_alloc_page+0xfd/0x110 [ 3304.006288][T12024] __alloc_pages+0x108/0x340 [ 3304.006372][T12024] vma_alloc_folio+0x6a3/0x8c0 [ 3304.006396][T12024] shmem_get_folio_gfp+0x801/0x1200 [ 3304.006431][T12024] shmem_write_begin+0xa6/0x1d0 [ 3304.006456][T12024] generic_perform_write+0x1cf/0x410 [ 3304.006525][T12024] ? shmem_write_begin+0x1d0/0x1d0 [ 3304.006546][T12024] __generic_file_write_iter+0xa1/0x120 [ 3304.006634][T12024] generic_file_write_iter+0x7d/0x1c0 [ 3304.006662][T12024] vfs_write+0x4ab/0x7d0 [ 3304.006689][T12024] ksys_write+0xeb/0x1a0 [ 3304.006758][T12024] __x64_sys_write+0x42/0x50 [ 3304.006789][T12024] do_syscall_64+0x41/0xc0 [ 3304.006812][T12024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3304.006894][T12024] RIP: 0033:0x7ff0343a5ae9 [ 3304.006909][T12024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5600, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:19 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 25) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xb, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/17, 0x11}, {0x0}], 0x2, &(0x7f0000001380)=[{&(0x7f0000001200)=""/81, 0x51}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f00000004c0)=""/2, 0x2}], 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/10, 0xa}], 0xa, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/76, 0x4c}], 0x5, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7fffffff) (async) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7fffffff) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r7 = accept$phonet_pipe(r2, &(0x7f0000000380), &(0x7f0000000500)=0x10) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) 14:58:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3304.006927][T12024] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3304.006946][T12024] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3304.006960][T12024] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3304.006972][T12024] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3304.006985][T12024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3304.006996][T12024] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3304.007062][T12024] 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x300, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.292821][T12031] FAULT_INJECTION: forcing a failure. [ 3304.292821][T12031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3304.306037][T12031] CPU: 1 PID: 12031 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3304.316719][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3304.316735][T12031] Call Trace: [ 3304.316741][T12031] 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x500, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x600, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.316748][T12031] dump_stack_lvl+0xda/0x130 [ 3304.316781][T12031] dump_stack+0x15/0x20 [ 3304.316872][T12031] should_fail_ex+0x21f/0x230 [ 3304.316896][T12031] should_fail+0xb/0x10 [ 3304.316917][T12031] should_fail_usercopy+0x1a/0x20 [ 3304.316940][T12031] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3304.316995][T12031] ? folio_test_hugetlb+0x3a/0x70 [ 3304.317017][T12031] ? shmem_write_begin+0x12a/0x1d0 14:58:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x700, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.317041][T12031] generic_perform_write+0x212/0x410 [ 3304.317117][T12031] ? shmem_write_begin+0x1d0/0x1d0 [ 3304.317141][T12031] __generic_file_write_iter+0xa1/0x120 [ 3304.317220][T12031] generic_file_write_iter+0x7d/0x1c0 [ 3304.317249][T12031] vfs_write+0x4ab/0x7d0 [ 3304.317281][T12031] ksys_write+0xeb/0x1a0 [ 3304.317306][T12031] __x64_sys_write+0x42/0x50 [ 3304.317393][T12031] do_syscall_64+0x41/0xc0 [ 3304.317419][T12031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3304.317475][T12031] RIP: 0033:0x7ff0343a5ae9 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x900, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.317489][T12031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3304.317509][T12031] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3304.317526][T12031] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5601, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc020660b, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xa00, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 26) 14:58:20 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/17, 0x11}, {0x0}], 0x2, &(0x7f0000001380)=[{&(0x7f0000001200)=""/81, 0x51}], 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f00000004c0)=""/2, 0x2}], 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/10, 0xa}], 0xa, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/76, 0x4c}], 0x5, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7fffffff) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r7 = accept$phonet_pipe(r2, &(0x7f0000000380), &(0x7f0000000500)=0x10) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) getpid() (async) process_vm_writev(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/17, 0x11}, {0x0}], 0x2, &(0x7f0000001380)=[{&(0x7f0000001200)=""/81, 0x51}], 0x1, 0x0) (async) process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f00000004c0)=""/2, 0x2}], 0x2, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) process_vm_writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/186, 0xba}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b00)=""/148, 0x94}, {&(0x7f0000000bc0)=""/48, 0x30}, {&(0x7f0000000c00)=""/10, 0xa}], 0xa, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/76, 0x4c}], 0x5, 0x0) (async) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7fffffff) (async) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) (async) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) accept$phonet_pipe(r2, &(0x7f0000000380), &(0x7f0000000500)=0x10) (async) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) (async) 14:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3304.317539][T12031] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3304.317603][T12031] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3304.317615][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3304.317626][T12031] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3304.317640][T12031] 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xb00, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x3f00, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.555359][T12064] FAULT_INJECTION: forcing a failure. [ 3304.555359][T12064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3304.568727][T12064] CPU: 1 PID: 12064 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3304.568755][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3304.568768][T12064] Call Trace: [ 3304.568774][T12064] [ 3304.568781][T12064] dump_stack_lvl+0xda/0x130 [ 3304.568847][T12064] dump_stack+0x15/0x20 14:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x47ee, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.568872][T12064] should_fail_ex+0x21f/0x230 [ 3304.568895][T12064] __should_fail_alloc_page+0xfd/0x110 [ 3304.568997][T12064] __alloc_pages+0x108/0x340 [ 3304.569024][T12064] vma_alloc_folio+0x6a3/0x8c0 [ 3304.569087][T12064] shmem_get_folio_gfp+0x801/0x1200 [ 3304.569119][T12064] shmem_write_begin+0xa6/0x1d0 [ 3304.569143][T12064] generic_perform_write+0x1cf/0x410 [ 3304.569169][T12064] ? shmem_write_begin+0x1d0/0x1d0 [ 3304.569267][T12064] __generic_file_write_iter+0xa1/0x120 [ 3304.569426][T12064] generic_file_write_iter+0x7d/0x1c0 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x80fe, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.569453][T12064] vfs_write+0x4ab/0x7d0 [ 3304.569497][T12064] ksys_write+0xeb/0x1a0 [ 3304.569522][T12064] __x64_sys_write+0x42/0x50 [ 3304.569547][T12064] do_syscall_64+0x41/0xc0 [ 3304.569568][T12064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3304.679432][T12064] RIP: 0033:0x7ff0343a5ae9 [ 3304.679451][T12064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3304.679473][T12064] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3304.679509][T12064] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3304.679523][T12064] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3304.679544][T12064] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3304.679649][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3304.679666][T12064] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5602, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xee47, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 27) 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3304.679712][T12064] 14:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5603, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfe80, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) [ 3304.791644][T12112] FAULT_INJECTION: forcing a failure. [ 3304.791644][T12112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3304.804999][T12112] CPU: 0 PID: 12112 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3304.815556][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3304.815719][T12112] Call Trace: [ 3304.815727][T12112] 14:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xff01, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x40000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3304.815735][T12112] dump_stack_lvl+0xda/0x130 [ 3304.815836][T12112] dump_stack+0x15/0x20 [ 3304.815858][T12112] should_fail_ex+0x21f/0x230 [ 3304.815950][T12112] should_fail+0xb/0x10 [ 3304.816024][T12112] should_fail_usercopy+0x1a/0x20 [ 3304.816054][T12112] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3304.816085][T12112] ? folio_test_hugetlb+0x3a/0x70 [ 3304.816142][T12112] ? shmem_write_begin+0x12a/0x1d0 [ 3304.816165][T12112] generic_perform_write+0x212/0x410 [ 3304.816218][T12112] ? shmem_write_begin+0x1d0/0x1d0 [ 3304.816242][T12112] __generic_file_write_iter+0xa1/0x120 [ 3304.816342][T12112] generic_file_write_iter+0x7d/0x1c0 [ 3304.816417][T12112] vfs_write+0x4ab/0x7d0 [ 3304.816483][T12112] ksys_write+0xeb/0x1a0 [ 3304.816511][T12112] __x64_sys_write+0x42/0x50 [ 3304.816540][T12112] do_syscall_64+0x41/0xc0 [ 3304.816565][T12112] ? irqentry_exit+0x12/0x40 [ 3304.816703][T12112] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3304.816731][T12112] RIP: 0033:0x7ff0343a5ae9 [ 3304.816747][T12112] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3304.816764][T12112] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x100000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7, 0x9, 0x3f}) ioctl$TCSETSW2(r0, 0x5453, 0x0) syz_open_pts(0xffffffffffffffff, 0x20000) 14:58:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 28) 14:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5605, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3304.816781][T12112] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3304.816793][T12112] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3304.816828][T12112] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3304.816842][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3304.816856][T12112] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3304.816935][T12112] [ 3305.057895][T12136] FAULT_INJECTION: forcing a failure. [ 3305.057895][T12136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3305.071309][T12136] CPU: 0 PID: 12136 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3305.081738][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3305.081751][T12136] Call Trace: [ 3305.081757][T12136] [ 3305.098274][T12136] dump_stack_lvl+0xda/0x130 [ 3305.103092][T12136] dump_stack+0x15/0x20 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7, 0x9, 0x3f}) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x20000) 14:58:20 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7, 0x9, 0x3f}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async, rerun: 64) syz_open_pts(0xffffffffffffffff, 0x20000) (rerun: 64) 14:58:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3305.103117][T12136] should_fail_ex+0x21f/0x230 [ 3305.103140][T12136] __should_fail_alloc_page+0xfd/0x110 [ 3305.117393][T12136] __alloc_pages+0x108/0x340 [ 3305.117449][T12136] vma_alloc_folio+0x6a3/0x8c0 [ 3305.117479][T12136] shmem_get_folio_gfp+0x801/0x1200 [ 3305.132076][T12136] shmem_write_begin+0xa6/0x1d0 [ 3305.136992][T12136] generic_perform_write+0x1cf/0x410 [ 3305.142358][T12136] ? shmem_write_begin+0x1d0/0x1d0 [ 3305.147623][T12136] __generic_file_write_iter+0xa1/0x120 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x800000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x1000000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3305.153470][T12136] generic_file_write_iter+0x7d/0x1c0 [ 3305.158984][T12136] vfs_write+0x4ab/0x7d0 [ 3305.163504][T12136] ksys_write+0xeb/0x1a0 [ 3305.167836][T12136] __x64_sys_write+0x42/0x50 [ 3305.172565][T12136] do_syscall_64+0x41/0xc0 [ 3305.177118][T12136] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3305.183227][T12136] RIP: 0033:0x7ff0343a5ae9 [ 3305.187656][T12136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:20 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 29) [ 3305.207291][T12136] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3305.215810][T12136] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3305.223900][T12136] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3305.232043][T12136] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3305.232188][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3305.232202][T12136] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3305.232303][T12136] [ 3305.264464][T12161] FAULT_INJECTION: forcing a failure. [ 3305.264464][T12161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3305.264486][T12161] CPU: 1 PID: 12161 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3305.264510][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3305.264522][T12161] Call Trace: [ 3305.264528][T12161] [ 3305.264535][T12161] dump_stack_lvl+0xda/0x130 [ 3305.264572][T12161] dump_stack+0x15/0x20 [ 3305.264594][T12161] should_fail_ex+0x21f/0x230 [ 3305.264613][T12161] should_fail+0xb/0x10 [ 3305.264633][T12161] should_fail_usercopy+0x1a/0x20 [ 3305.264656][T12161] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3305.264729][T12161] ? folio_test_hugetlb+0x3a/0x70 [ 3305.264751][T12161] ? shmem_write_begin+0x12a/0x1d0 [ 3305.264775][T12161] generic_perform_write+0x212/0x410 [ 3305.264862][T12161] ? shmem_write_begin+0x1d0/0x1d0 [ 3305.264888][T12161] __generic_file_write_iter+0xa1/0x120 [ 3305.264920][T12161] generic_file_write_iter+0x7d/0x1c0 [ 3305.264950][T12161] vfs_write+0x4ab/0x7d0 [ 3305.265051][T12161] ksys_write+0xeb/0x1a0 [ 3305.265081][T12161] __x64_sys_write+0x42/0x50 [ 3305.265112][T12161] do_syscall_64+0x41/0xc0 [ 3305.265168][T12161] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3305.265306][T12161] RIP: 0033:0x7ff0343a5ae9 [ 3305.265322][T12161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3305.265344][T12161] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3305.265366][T12161] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x3000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 30) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5606, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3305.265381][T12161] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3305.265396][T12161] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3305.265440][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3305.265452][T12161] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3305.265466][T12161] [ 3305.533985][T12167] FAULT_INJECTION: forcing a failure. [ 3305.533985][T12167] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3305.547362][T12167] CPU: 1 PID: 12167 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3305.547419][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3305.547433][T12167] Call Trace: [ 3305.547439][T12167] [ 3305.547445][T12167] dump_stack_lvl+0xda/0x130 [ 3305.547479][T12167] dump_stack+0x15/0x20 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x5000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x6000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x7000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x8000000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3305.547527][T12167] should_fail_ex+0x21f/0x230 [ 3305.547617][T12167] __should_fail_alloc_page+0xfd/0x110 [ 3305.547642][T12167] __alloc_pages+0x108/0x340 [ 3305.547669][T12167] vma_alloc_folio+0x6a3/0x8c0 [ 3305.547699][T12167] shmem_get_folio_gfp+0x801/0x1200 [ 3305.547736][T12167] shmem_write_begin+0xa6/0x1d0 [ 3305.547758][T12167] generic_perform_write+0x1cf/0x410 [ 3305.547871][T12167] ? shmem_write_begin+0x1d0/0x1d0 [ 3305.547902][T12167] __generic_file_write_iter+0xa1/0x120 [ 3305.547959][T12167] generic_file_write_iter+0x7d/0x1c0 [ 3305.548053][T12167] vfs_write+0x4ab/0x7d0 [ 3305.548085][T12167] ksys_write+0xeb/0x1a0 [ 3305.548115][T12167] __x64_sys_write+0x42/0x50 [ 3305.548141][T12167] do_syscall_64+0x41/0xc0 [ 3305.652134][T12167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3305.652163][T12167] RIP: 0033:0x7ff0343a5ae9 [ 3305.652175][T12167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3305.652187][T12167] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3305.652200][T12167] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3305.652249][T12167] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3305.652336][T12167] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3305.652344][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3305.652351][T12167] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x9000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 31) 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5607, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xa000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3305.652360][T12167] 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xb000000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3305.781626][T12205] FAULT_INJECTION: forcing a failure. [ 3305.781626][T12205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3305.794725][T12205] CPU: 1 PID: 12205 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3305.794751][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3305.815361][T12205] Call Trace: [ 3305.815369][T12205] [ 3305.815376][T12205] dump_stack_lvl+0xda/0x130 [ 3305.826246][T12205] dump_stack+0x15/0x20 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5608, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x5609, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10000000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3305.826277][T12205] should_fail_ex+0x21f/0x230 [ 3305.826297][T12205] should_fail+0xb/0x10 [ 3305.826314][T12205] should_fail_usercopy+0x1a/0x20 [ 3305.844455][T12205] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3305.844524][T12205] ? folio_test_hugetlb+0x3a/0x70 [ 3305.844543][T12205] ? shmem_write_begin+0x12a/0x1d0 [ 3305.844568][T12205] generic_perform_write+0x212/0x410 [ 3305.865761][T12205] ? shmem_write_begin+0x1d0/0x1d0 [ 3305.865835][T12205] __generic_file_write_iter+0xa1/0x120 [ 3305.876555][T12205] generic_file_write_iter+0x7d/0x1c0 14:58:21 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3305.882043][T12205] vfs_write+0x4ab/0x7d0 [ 3305.882153][T12205] ksys_write+0xeb/0x1a0 [ 3305.882181][T12205] __x64_sys_write+0x42/0x50 [ 3305.882241][T12205] do_syscall_64+0x41/0xc0 [ 3305.882264][T12205] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3305.882293][T12205] RIP: 0033:0x7ff0343a5ae9 [ 3305.882307][T12205] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3305.882327][T12205] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3305.882354][T12205] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3305.882369][T12205] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3305.882381][T12205] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 32) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x153, 0x5, &(0x7f0000000040)}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000004c0)=0x1c) 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x3f000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x40000000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 33) [ 3305.882392][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3305.882406][T12205] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3305.882424][T12205] [ 3306.043280][T12231] FAULT_INJECTION: forcing a failure. 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x47ee0000, @mcast1}, 0x1c, 0x0}, 0x4008051) [ 3306.043280][T12231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3306.043303][T12231] CPU: 1 PID: 12231 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3306.043329][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3306.043355][T12231] Call Trace: [ 3306.043361][T12231] [ 3306.043367][T12231] dump_stack_lvl+0xda/0x130 [ 3306.043417][T12231] dump_stack+0x15/0x20 [ 3306.043439][T12231] should_fail_ex+0x21f/0x230 [ 3306.043458][T12231] __should_fail_alloc_page+0xfd/0x110 [ 3306.043483][T12231] __alloc_pages+0x108/0x340 [ 3306.043507][T12231] vma_alloc_folio+0x6a3/0x8c0 [ 3306.043607][T12231] shmem_get_folio_gfp+0x801/0x1200 [ 3306.043637][T12231] shmem_write_begin+0xa6/0x1d0 [ 3306.043657][T12231] generic_perform_write+0x1cf/0x410 [ 3306.043734][T12231] ? shmem_write_begin+0x1d0/0x1d0 [ 3306.043890][T12231] __generic_file_write_iter+0xa1/0x120 [ 3306.043914][T12231] generic_file_write_iter+0x7d/0x1c0 [ 3306.043939][T12231] vfs_write+0x4ab/0x7d0 [ 3306.043961][T12231] ksys_write+0xeb/0x1a0 [ 3306.044119][T12231] __x64_sys_write+0x42/0x50 [ 3306.044144][T12231] do_syscall_64+0x41/0xc0 [ 3306.044168][T12231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3306.044208][T12231] RIP: 0033:0x7ff0343a5ae9 [ 3306.044221][T12231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3306.044238][T12231] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3306.044314][T12231] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3306.044326][T12231] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3306.044371][T12231] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3306.044384][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3306.044397][T12231] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3306.044412][T12231] [ 3306.065273][T12237] FAULT_INJECTION: forcing a failure. 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560a, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x7ffffff7, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x97ffffff, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x153, 0x5, &(0x7f0000000040)}) (async, rerun: 64) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000004c0)=0x1c) (rerun: 64) 14:58:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3306.065273][T12237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3306.263588][T12237] CPU: 0 PID: 12237 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3306.263613][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3306.263625][T12237] Call Trace: [ 3306.263632][T12237] [ 3306.263638][T12237] dump_stack_lvl+0xda/0x130 [ 3306.295085][T12237] dump_stack+0x15/0x20 [ 3306.299376][T12237] should_fail_ex+0x21f/0x230 [ 3306.304074][T12237] should_fail+0xb/0x10 14:58:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3306.308318][T12237] should_fail_usercopy+0x1a/0x20 [ 3306.313396][T12237] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3306.319246][T12237] ? folio_test_hugetlb+0x3a/0x70 [ 3306.324280][T12237] ? shmem_write_begin+0x12a/0x1d0 [ 3306.329425][T12237] generic_perform_write+0x212/0x410 [ 3306.334797][T12237] ? shmem_write_begin+0x1d0/0x1d0 [ 3306.339982][T12237] __generic_file_write_iter+0xa1/0x120 [ 3306.340013][T12237] generic_file_write_iter+0x7d/0x1c0 [ 3306.340184][T12237] vfs_write+0x4ab/0x7d0 [ 3306.340225][T12237] ksys_write+0xeb/0x1a0 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560b, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:21 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async, rerun: 32) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7f) (rerun: 32) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x153, 0x5, &(0x7f0000000040)}) (async, rerun: 64) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000004c0)=0x1c) (rerun: 64) [ 3306.340253][T12237] __x64_sys_write+0x42/0x50 [ 3306.340279][T12237] do_syscall_64+0x41/0xc0 [ 3306.368777][T12237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3306.368854][T12237] RIP: 0033:0x7ff0343a5ae9 [ 3306.368869][T12237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3306.368891][T12237] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3306.368909][T12237] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3306.368922][T12237] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3306.423155][T12237] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3306.423169][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3306.439108][T12237] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3306.439127][T12237] 14:58:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 34) 14:58:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xeffdffff, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x7, 0x8, 0x6, 0xfffd, 0xe, "f4be14ec414dd690"}) 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xf5ffffff, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560e, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xf7ffff7f, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfe800000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3306.614982][T12278] FAULT_INJECTION: forcing a failure. [ 3306.614982][T12278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3306.628279][T12278] CPU: 0 PID: 12278 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3306.638781][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3306.648930][T12278] Call Trace: [ 3306.652211][T12278] [ 3306.655147][T12278] dump_stack_lvl+0xda/0x130 [ 3306.659762][T12278] dump_stack+0x15/0x20 [ 3306.664105][T12278] should_fail_ex+0x21f/0x230 [ 3306.668901][T12278] __should_fail_alloc_page+0xfd/0x110 [ 3306.674413][T12278] __alloc_pages+0x108/0x340 [ 3306.679103][T12278] vma_alloc_folio+0x6a3/0x8c0 [ 3306.679128][T12278] shmem_get_folio_gfp+0x801/0x1200 [ 3306.679171][T12278] shmem_write_begin+0xa6/0x1d0 [ 3306.679185][T12278] generic_perform_write+0x1cf/0x410 [ 3306.679204][T12278] ? shmem_write_begin+0x1d0/0x1d0 [ 3306.679235][T12278] __generic_file_write_iter+0xa1/0x120 [ 3306.710128][T12278] generic_file_write_iter+0x7d/0x1c0 [ 3306.715530][T12278] vfs_write+0x4ab/0x7d0 [ 3306.719762][T12278] ksys_write+0xeb/0x1a0 [ 3306.724064][T12278] __x64_sys_write+0x42/0x50 [ 3306.728646][T12278] do_syscall_64+0x41/0xc0 [ 3306.733073][T12278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3306.738990][T12278] RIP: 0033:0x7ff0343a5ae9 [ 3306.743386][T12278] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 35) 14:58:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x7, 0x8, 0x6, 0xfffd, 0xe, "f4be14ec414dd690"}) 14:58:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xff010000, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:22 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3306.763149][T12278] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3306.771542][T12278] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3306.779501][T12278] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3306.787664][T12278] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3306.795620][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3306.803576][T12278] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3306.811550][T12278] 14:58:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffdef, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) [ 3306.840448][T12298] FAULT_INJECTION: forcing a failure. [ 3306.840448][T12298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3306.853553][T12298] CPU: 0 PID: 12298 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3306.863985][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3306.874062][T12298] Call Trace: [ 3306.877344][T12298] [ 3306.880318][T12298] dump_stack_lvl+0xda/0x130 [ 3306.884974][T12298] dump_stack+0x15/0x20 [ 3306.889205][T12298] should_fail_ex+0x21f/0x230 [ 3306.893902][T12298] should_fail+0xb/0x10 [ 3306.898156][T12298] should_fail_usercopy+0x1a/0x20 [ 3306.898172][T12298] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3306.898189][T12298] ? folio_test_hugetlb+0x3a/0x70 [ 3306.898234][T12298] ? shmem_write_begin+0x12a/0x1d0 [ 3306.898247][T12298] generic_perform_write+0x212/0x410 [ 3306.898265][T12298] ? shmem_write_begin+0x1d0/0x1d0 [ 3306.898308][T12298] __generic_file_write_iter+0xa1/0x120 [ 3306.898325][T12298] generic_file_write_iter+0x7d/0x1c0 [ 3306.898340][T12298] vfs_write+0x4ab/0x7d0 [ 3306.898357][T12298] ksys_write+0xeb/0x1a0 [ 3306.898434][T12298] __x64_sys_write+0x42/0x50 [ 3306.898451][T12298] do_syscall_64+0x41/0xc0 [ 3306.898539][T12298] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3306.898599][T12298] RIP: 0033:0x7ff0343a5ae9 [ 3306.898615][T12298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3306.898634][T12298] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3306.996388][T12298] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3307.004349][T12298] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3307.012380][T12298] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3307.020364][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3307.028320][T12298] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3307.036343][T12298] 14:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x560f, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xffffff7f, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x7, 0x8, 0x6, 0xfffd, 0xe, "f4be14ec414dd690"}) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x7, 0x8, 0x6, 0xfffd, 0xe, "f4be14ec414dd690"}) 14:58:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000003, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 36) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xffffff97, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffff5, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3307.531756][T12316] FAULT_INJECTION: forcing a failure. [ 3307.531756][T12316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3307.545080][T12316] CPU: 0 PID: 12316 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3307.555515][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3307.565676][T12316] Call Trace: [ 3307.568963][T12316] [ 3307.571913][T12316] dump_stack_lvl+0xda/0x130 [ 3307.576593][T12316] dump_stack+0x15/0x20 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0x0}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3307.580762][T12316] should_fail_ex+0x21f/0x230 [ 3307.585624][T12316] __should_fail_alloc_page+0xfd/0x110 [ 3307.591110][T12316] __alloc_pages+0x108/0x340 [ 3307.595714][T12316] vma_alloc_folio+0x6a3/0x8c0 [ 3307.600537][T12316] shmem_get_folio_gfp+0x801/0x1200 [ 3307.605759][T12316] shmem_write_begin+0xa6/0x1d0 [ 3307.610678][T12316] generic_perform_write+0x1cf/0x410 [ 3307.616026][T12316] ? shmem_write_begin+0x1d0/0x1d0 [ 3307.621236][T12316] __generic_file_write_iter+0xa1/0x120 [ 3307.626912][T12316] generic_file_write_iter+0x7d/0x1c0 [ 3307.632302][T12316] vfs_write+0x4ab/0x7d0 [ 3307.636607][T12316] ksys_write+0xeb/0x1a0 [ 3307.640892][T12316] __x64_sys_write+0x42/0x50 [ 3307.640945][T12316] do_syscall_64+0x41/0xc0 [ 3307.640960][T12316] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3307.640978][T12316] RIP: 0033:0x7ff0343a5ae9 [ 3307.640992][T12316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40049409, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x0}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000004, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 37) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x2}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000006, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3307.641011][T12316] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3307.688395][T12316] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3307.688411][T12316] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3307.688425][T12316] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3307.712435][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3307.712450][T12316] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3307.712468][T12316] 14:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40086602, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x3}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000300, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3307.793069][T12354] FAULT_INJECTION: forcing a failure. [ 3307.793069][T12354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3307.806254][T12354] CPU: 1 PID: 12354 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3307.806285][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3307.806382][T12354] Call Trace: 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x4}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x5}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x6}}, 0x1c, 0x0}, 0x4008051) [ 3307.806406][T12354] [ 3307.806412][T12354] dump_stack_lvl+0xda/0x130 [ 3307.806532][T12354] dump_stack+0x15/0x20 [ 3307.806557][T12354] should_fail_ex+0x21f/0x230 [ 3307.806580][T12354] should_fail+0xb/0x10 [ 3307.806601][T12354] should_fail_usercopy+0x1a/0x20 [ 3307.806703][T12354] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3307.806735][T12354] ? folio_test_hugetlb+0x3a/0x70 [ 3307.806757][T12354] ? shmem_write_begin+0x12a/0x1d0 [ 3307.806825][T12354] generic_perform_write+0x212/0x410 [ 3307.806857][T12354] ? shmem_write_begin+0x1d0/0x1d0 [ 3307.806879][T12354] __generic_file_write_iter+0xa1/0x120 [ 3307.806913][T12354] generic_file_write_iter+0x7d/0x1c0 [ 3307.806940][T12354] vfs_write+0x4ab/0x7d0 [ 3307.806979][T12354] ksys_write+0xeb/0x1a0 14:58:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 38) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}, 0x1c, 0x0}, 0x4008051) [ 3307.807007][T12354] __x64_sys_write+0x42/0x50 [ 3307.807073][T12354] do_syscall_64+0x41/0xc0 [ 3307.807118][T12354] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3307.807148][T12354] RIP: 0033:0x7ff0343a5ae9 [ 3307.807163][T12354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3307.807224][T12354] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x8}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 39) [ 3307.807251][T12354] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3307.807266][T12354] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3307.807311][T12354] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3307.807323][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3307.807335][T12354] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3307.807348][T12354] [ 3308.007551][T12374] FAULT_INJECTION: forcing a failure. [ 3308.007551][T12374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3308.007575][T12374] CPU: 1 PID: 12374 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3308.007670][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3308.007719][T12374] Call Trace: [ 3308.007725][T12374] [ 3308.007731][T12374] dump_stack_lvl+0xda/0x130 [ 3308.007758][T12374] dump_stack+0x15/0x20 [ 3308.007781][T12374] should_fail_ex+0x21f/0x230 [ 3308.007802][T12374] __should_fail_alloc_page+0xfd/0x110 [ 3308.007862][T12374] __alloc_pages+0x108/0x340 [ 3308.007887][T12374] vma_alloc_folio+0x6a3/0x8c0 [ 3308.007915][T12374] shmem_get_folio_gfp+0x801/0x1200 [ 3308.007975][T12374] shmem_write_begin+0xa6/0x1d0 [ 3308.007996][T12374] generic_perform_write+0x1cf/0x410 [ 3308.008026][T12374] ? shmem_write_begin+0x1d0/0x1d0 [ 3308.008047][T12374] __generic_file_write_iter+0xa1/0x120 [ 3308.008108][T12374] generic_file_write_iter+0x7d/0x1c0 [ 3308.008134][T12374] vfs_write+0x4ab/0x7d0 [ 3308.008162][T12374] ksys_write+0xeb/0x1a0 [ 3308.008238][T12374] __x64_sys_write+0x42/0x50 [ 3308.008263][T12374] do_syscall_64+0x41/0xc0 [ 3308.008285][T12374] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3308.008313][T12374] RIP: 0033:0x7ff0343a5ae9 [ 3308.008340][T12374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3308.008360][T12374] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3308.008378][T12374] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3308.008389][T12374] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3308.008400][T12374] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3308.008411][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3308.008423][T12374] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x40087602, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x9}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3308.008437][T12374] [ 3308.043798][T12378] FAULT_INJECTION: forcing a failure. [ 3308.043798][T12378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3308.263113][T12378] CPU: 0 PID: 12378 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3308.263139][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3308.263151][T12378] Call Trace: [ 3308.263158][T12378] [ 3308.289876][T12378] dump_stack_lvl+0xda/0x130 [ 3308.294602][T12378] dump_stack+0x15/0x20 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0xa}}, 0x1c, 0x0}, 0x4008051) [ 3308.298998][T12378] should_fail_ex+0x21f/0x230 [ 3308.303693][T12378] should_fail+0xb/0x10 [ 3308.307865][T12378] should_fail_usercopy+0x1a/0x20 [ 3308.312910][T12378] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3308.318761][T12378] ? folio_test_hugetlb+0x3a/0x70 [ 3308.323792][T12378] ? shmem_write_begin+0x12a/0x1d0 [ 3308.328943][T12378] generic_perform_write+0x212/0x410 [ 3308.334286][T12378] ? shmem_write_begin+0x1d0/0x1d0 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x0}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x2}}, 0x1c, 0x0}, 0x4008051) [ 3308.334337][T12378] __generic_file_write_iter+0xa1/0x120 [ 3308.334369][T12378] generic_file_write_iter+0x7d/0x1c0 [ 3308.334395][T12378] vfs_write+0x4ab/0x7d0 [ 3308.334506][T12378] ksys_write+0xeb/0x1a0 [ 3308.334533][T12378] __x64_sys_write+0x42/0x50 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x3}}, 0x1c, 0x0}, 0x4008051) 14:58:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x4}}, 0x1c, 0x0}, 0x4008051) [ 3308.334560][T12378] do_syscall_64+0x41/0xc0 [ 3308.334625][T12378] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3308.334701][T12378] RIP: 0033:0x7ff0343a5ae9 [ 3308.334736][T12378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x5}}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 40) [ 3308.334782][T12378] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3308.334800][T12378] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3308.334813][T12378] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3308.334827][T12378] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3308.334842][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:58:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x401c5820, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x6}}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3308.334887][T12378] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3308.334901][T12378] [ 3308.508436][T12406] FAULT_INJECTION: forcing a failure. [ 3308.508436][T12406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3308.525685][T12406] CPU: 0 PID: 12406 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3308.536183][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3308.536199][T12406] Call Trace: [ 3308.536204][T12406] [ 3308.536211][T12406] dump_stack_lvl+0xda/0x130 [ 3308.536242][T12406] dump_stack+0x15/0x20 [ 3308.536263][T12406] should_fail_ex+0x21f/0x230 [ 3308.536286][T12406] __should_fail_alloc_page+0xfd/0x110 [ 3308.536375][T12406] __alloc_pages+0x108/0x340 [ 3308.536397][T12406] vma_alloc_folio+0x6a3/0x8c0 [ 3308.536423][T12406] shmem_get_folio_gfp+0x801/0x1200 [ 3308.536455][T12406] shmem_write_begin+0xa6/0x1d0 [ 3308.536525][T12406] generic_perform_write+0x1cf/0x410 [ 3308.536583][T12406] ? shmem_write_begin+0x1d0/0x1d0 [ 3308.536608][T12406] __generic_file_write_iter+0xa1/0x120 [ 3308.536638][T12406] generic_file_write_iter+0x7d/0x1c0 [ 3308.536668][T12406] vfs_write+0x4ab/0x7d0 [ 3308.536707][T12406] ksys_write+0xeb/0x1a0 [ 3308.536731][T12406] __x64_sys_write+0x42/0x50 [ 3308.536761][T12406] do_syscall_64+0x41/0xc0 [ 3308.536839][T12406] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3308.536943][T12406] RIP: 0033:0x7ff0343a5ae9 [ 3308.536961][T12406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3308.536981][T12406] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3308.537051][T12406] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3308.537081][T12406] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3308.537095][T12406] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 41) 14:58:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x10085c1, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x7}}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:24 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x4020940d, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3308.537108][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3308.537122][T12406] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3308.537137][T12406] [ 3308.741210][T12419] FAULT_INJECTION: forcing a failure. [ 3308.741210][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 14:58:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f0000000080)=0xc) 14:58:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3308.754376][T12419] CPU: 0 PID: 12419 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3308.765022][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3308.775090][T12419] Call Trace: [ 3308.778401][T12419] [ 3308.781330][T12419] dump_stack_lvl+0xda/0x130 [ 3308.785944][T12419] dump_stack+0x15/0x20 [ 3308.790115][T12419] should_fail_ex+0x21f/0x230 [ 3308.794803][T12419] should_fail+0xb/0x10 [ 3308.799020][T12419] should_fail_usercopy+0x1a/0x20 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x8}}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f0000000080)=0xc) [ 3308.804112][T12419] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3308.809850][T12419] ? folio_test_hugetlb+0x3a/0x70 [ 3308.814961][T12419] ? shmem_write_begin+0x12a/0x1d0 [ 3308.820088][T12419] generic_perform_write+0x212/0x410 [ 3308.825463][T12419] ? shmem_write_begin+0x1d0/0x1d0 [ 3308.825495][T12419] __generic_file_write_iter+0xa1/0x120 [ 3308.825571][T12419] generic_file_write_iter+0x7d/0x1c0 [ 3308.825596][T12419] vfs_write+0x4ab/0x7d0 [ 3308.825628][T12419] ksys_write+0xeb/0x1a0 [ 3308.825659][T12419] __x64_sys_write+0x42/0x50 [ 3308.825709][T12419] do_syscall_64+0x41/0xc0 [ 3308.825736][T12419] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3308.825766][T12419] RIP: 0033:0x7ff0343a5ae9 [ 3308.825784][T12419] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3308.825801][T12419] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3308.825828][T12419] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3308.825842][T12419] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 42) 14:58:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x100c185, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80045432, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @dev}, &(0x7f0000000080)=0xc) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0x9}}, 0x1c, 0x0}, 0x4008051) [ 3308.825857][T12419] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3308.825869][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3308.825881][T12419] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3308.825910][T12419] [ 3308.987204][T12443] FAULT_INJECTION: forcing a failure. [ 3308.987204][T12443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:58:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, '\x00', 0xa}}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 43) [ 3309.000485][T12443] CPU: 0 PID: 12443 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.000511][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.000524][T12443] Call Trace: [ 3309.000530][T12443] [ 3309.000538][T12443] dump_stack_lvl+0xda/0x130 [ 3309.031913][T12443] dump_stack+0x15/0x20 [ 3309.031945][T12443] should_fail_ex+0x21f/0x230 [ 3309.032042][T12443] __should_fail_alloc_page+0xfd/0x110 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x2}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x3}, 0x1c, 0x0}, 0x4008051) [ 3309.032069][T12443] __alloc_pages+0x108/0x340 [ 3309.032095][T12443] vma_alloc_folio+0x6a3/0x8c0 [ 3309.032186][T12443] shmem_get_folio_gfp+0x801/0x1200 [ 3309.032216][T12443] shmem_write_begin+0xa6/0x1d0 [ 3309.032241][T12443] generic_perform_write+0x1cf/0x410 [ 3309.032276][T12443] ? shmem_write_begin+0x1d0/0x1d0 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x4}, 0x1c, 0x0}, 0x4008051) 14:58:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c, 0x0}, 0x4008051) [ 3309.032414][T12443] __generic_file_write_iter+0xa1/0x120 [ 3309.032442][T12443] generic_file_write_iter+0x7d/0x1c0 [ 3309.032468][T12443] vfs_write+0x4ab/0x7d0 [ 3309.032622][T12443] ksys_write+0xeb/0x1a0 [ 3309.032748][T12443] __x64_sys_write+0x42/0x50 [ 3309.032828][T12443] do_syscall_64+0x41/0xc0 [ 3309.032879][T12443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.032925][T12443] RIP: 0033:0x7ff0343a5ae9 [ 3309.032939][T12443] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.032957][T12443] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3309.032997][T12443] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3309.033012][T12443] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.033025][T12443] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.033037][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.033048][T12443] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3309.033063][T12443] [ 3309.077622][T12461] FAULT_INJECTION: forcing a failure. [ 3309.077622][T12461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3309.077664][T12461] CPU: 1 PID: 12461 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.077686][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.077699][T12461] Call Trace: [ 3309.077749][T12461] [ 3309.077755][T12461] dump_stack_lvl+0xda/0x130 [ 3309.077866][T12461] dump_stack+0x15/0x20 [ 3309.077891][T12461] should_fail_ex+0x21f/0x230 [ 3309.077947][T12461] should_fail+0xb/0x10 [ 3309.077964][T12461] should_fail_usercopy+0x1a/0x20 [ 3309.077988][T12461] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3309.078019][T12461] ? folio_test_hugetlb+0x3a/0x70 [ 3309.078110][T12461] ? shmem_write_begin+0x12a/0x1d0 [ 3309.078131][T12461] generic_perform_write+0x212/0x410 [ 3309.078187][T12461] ? shmem_write_begin+0x1d0/0x1d0 [ 3309.078208][T12461] __generic_file_write_iter+0xa1/0x120 [ 3309.078238][T12461] generic_file_write_iter+0x7d/0x1c0 [ 3309.078266][T12461] vfs_write+0x4ab/0x7d0 [ 3309.078305][T12461] ksys_write+0xeb/0x1a0 [ 3309.078335][T12461] __x64_sys_write+0x42/0x50 [ 3309.078360][T12461] do_syscall_64+0x41/0xc0 [ 3309.078381][T12461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.078465][T12461] RIP: 0033:0x7ff0343a5ae9 [ 3309.078482][T12461] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.078500][T12461] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3309.078517][T12461] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x2000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80045440, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x6}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 44) 14:58:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x19d082, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44822) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3309.078529][T12461] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.078585][T12461] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.078604][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.078619][T12461] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3309.078636][T12461] 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x7}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x19d082, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44822) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3309.462149][T12476] FAULT_INJECTION: forcing a failure. [ 3309.462149][T12476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3309.475470][T12476] CPU: 0 PID: 12476 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.485896][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.495963][T12476] Call Trace: [ 3309.495970][T12476] [ 3309.495978][T12476] dump_stack_lvl+0xda/0x130 14:58:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x8}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x19d082, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x44822) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 45) [ 3309.496018][T12476] dump_stack+0x15/0x20 [ 3309.496039][T12476] should_fail_ex+0x21f/0x230 [ 3309.496059][T12476] __should_fail_alloc_page+0xfd/0x110 [ 3309.496125][T12476] __alloc_pages+0x108/0x340 [ 3309.496150][T12476] vma_alloc_folio+0x6a3/0x8c0 [ 3309.496177][T12476] shmem_get_folio_gfp+0x801/0x1200 [ 3309.496204][T12476] shmem_write_begin+0xa6/0x1d0 [ 3309.496301][T12476] generic_perform_write+0x1cf/0x410 [ 3309.496336][T12476] ? shmem_write_begin+0x1d0/0x1d0 [ 3309.496423][T12476] __generic_file_write_iter+0xa1/0x120 [ 3309.496448][T12476] generic_file_write_iter+0x7d/0x1c0 [ 3309.496495][T12476] vfs_write+0x4ab/0x7d0 [ 3309.496528][T12476] ksys_write+0xeb/0x1a0 [ 3309.496574][T12476] __x64_sys_write+0x42/0x50 [ 3309.496601][T12476] do_syscall_64+0x41/0xc0 [ 3309.496624][T12476] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.496701][T12476] RIP: 0033:0x7ff0343a5ae9 [ 3309.496717][T12476] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.496739][T12476] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3309.496760][T12476] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3309.496772][T12476] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.496786][T12476] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.496843][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.496865][T12476] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3309.496919][T12476] [ 3309.559883][T12501] FAULT_INJECTION: forcing a failure. [ 3309.559883][T12501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3309.559918][T12501] CPU: 0 PID: 12501 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.559939][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.559953][T12501] Call Trace: [ 3309.559960][T12501] [ 3309.559967][T12501] dump_stack_lvl+0xda/0x130 [ 3309.560072][T12501] dump_stack+0x15/0x20 [ 3309.560167][T12501] should_fail_ex+0x21f/0x230 [ 3309.560191][T12501] should_fail+0xb/0x10 [ 3309.560211][T12501] should_fail_usercopy+0x1a/0x20 [ 3309.560233][T12501] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3309.560265][T12501] ? folio_test_hugetlb+0x3a/0x70 [ 3309.560294][T12501] ? shmem_write_begin+0x12a/0x1d0 [ 3309.560360][T12501] generic_perform_write+0x212/0x410 [ 3309.560391][T12501] ? shmem_write_begin+0x1d0/0x1d0 [ 3309.560417][T12501] __generic_file_write_iter+0xa1/0x120 [ 3309.560514][T12501] generic_file_write_iter+0x7d/0x1c0 [ 3309.560576][T12501] vfs_write+0x4ab/0x7d0 [ 3309.560604][T12501] ksys_write+0xeb/0x1a0 [ 3309.560698][T12501] __x64_sys_write+0x42/0x50 [ 3309.560737][T12501] do_syscall_64+0x41/0xc0 [ 3309.560760][T12501] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.560791][T12501] RIP: 0033:0x7ff0343a5ae9 [ 3309.560807][T12501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.560835][T12501] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80086601, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x9}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r1, 0x614c0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)=""/182, &(0x7f0000000140)=0xb6) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) 14:58:25 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 46) [ 3309.560855][T12501] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3309.560870][T12501] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.560993][T12501] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.561007][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.561057][T12501] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3309.561072][T12501] 14:58:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 47) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xa}, 0x1c, 0x0}, 0x4008051) [ 3309.932755][T12511] FAULT_INJECTION: forcing a failure. [ 3309.932755][T12511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3309.946039][T12511] CPU: 1 PID: 12511 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.956460][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.956508][T12511] Call Trace: [ 3309.956513][T12511] 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xb}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x10}, 0x1c, 0x0}, 0x4008051) [ 3309.956519][T12511] dump_stack_lvl+0xda/0x130 [ 3309.956550][T12511] dump_stack+0x15/0x20 [ 3309.956589][T12511] should_fail_ex+0x21f/0x230 [ 3309.956608][T12511] __should_fail_alloc_page+0xfd/0x110 [ 3309.956630][T12511] __alloc_pages+0x108/0x340 [ 3309.956668][T12511] vma_alloc_folio+0x6a3/0x8c0 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x300}, 0x1c, 0x0}, 0x4008051) [ 3309.956697][T12511] shmem_get_folio_gfp+0x801/0x1200 [ 3309.956726][T12511] shmem_write_begin+0xa6/0x1d0 [ 3309.956750][T12511] generic_perform_write+0x1cf/0x410 [ 3309.956809][T12511] ? shmem_write_begin+0x1d0/0x1d0 [ 3309.956830][T12511] __generic_file_write_iter+0xa1/0x120 [ 3309.956858][T12511] generic_file_write_iter+0x7d/0x1c0 [ 3309.956961][T12511] vfs_write+0x4ab/0x7d0 [ 3309.957033][T12511] ksys_write+0xeb/0x1a0 [ 3309.957061][T12511] __x64_sys_write+0x42/0x50 [ 3309.957088][T12511] do_syscall_64+0x41/0xc0 [ 3309.957180][T12511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.957214][T12511] RIP: 0033:0x7ff0343a5ae9 [ 3309.957233][T12511] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.957274][T12511] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3309.957311][T12511] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3309.957326][T12511] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.957417][T12511] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.957431][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.957445][T12511] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3309.957463][T12511] [ 3309.982657][T12522] FAULT_INJECTION: forcing a failure. [ 3309.982657][T12522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3309.982684][T12522] CPU: 1 PID: 12522 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3309.982707][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3309.982719][T12522] Call Trace: [ 3309.982724][T12522] [ 3309.982731][T12522] dump_stack_lvl+0xda/0x130 [ 3309.982773][T12522] dump_stack+0x15/0x20 [ 3309.982797][T12522] should_fail_ex+0x21f/0x230 [ 3309.982817][T12522] should_fail+0xb/0x10 [ 3309.982837][T12522] should_fail_usercopy+0x1a/0x20 [ 3309.982859][T12522] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3309.982926][T12522] ? folio_test_hugetlb+0x3a/0x70 [ 3309.982949][T12522] ? shmem_write_begin+0x12a/0x1d0 [ 3309.983016][T12522] generic_perform_write+0x212/0x410 [ 3309.983043][T12522] ? shmem_write_begin+0x1d0/0x1d0 [ 3309.983098][T12522] __generic_file_write_iter+0xa1/0x120 [ 3309.983125][T12522] generic_file_write_iter+0x7d/0x1c0 [ 3309.983161][T12522] vfs_write+0x4ab/0x7d0 [ 3309.983213][T12522] ksys_write+0xeb/0x1a0 [ 3309.983241][T12522] __x64_sys_write+0x42/0x50 [ 3309.983272][T12522] do_syscall_64+0x41/0xc0 [ 3309.983295][T12522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.983382][T12522] RIP: 0033:0x7ff0343a5ae9 [ 3309.983396][T12522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3309.983418][T12522] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3309.983439][T12522] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3309.983454][T12522] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3309.983467][T12522] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3309.983482][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3309.983493][T12522] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x80087601, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x500}, 0x1c, 0x0}, 0x4008051) 14:58:25 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r1, 0x614c0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)=""/182, &(0x7f0000000140)=0xb6) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) syz_open_pts(r1, 0x614c0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)=""/182, &(0x7f0000000140)=0xb6) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r4, 0x5453, 0x0) (async) 14:58:25 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 48) 14:58:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3309.983507][T12522] 14:58:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:25 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r1, 0x614c0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)=""/182, &(0x7f0000000140)=0xb6) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) syz_open_pts(r1, 0x614c0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)=""/182, &(0x7f0000000140)=0xb6) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r4, 0x5453, 0x0) (async) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x600}, 0x1c, 0x0}, 0x4008051) [ 3310.410509][T12537] FAULT_INJECTION: forcing a failure. [ 3310.410509][T12537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3310.423788][T12537] CPU: 0 PID: 12537 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3310.434203][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3310.444321][T12537] Call Trace: [ 3310.447605][T12537] [ 3310.450541][T12537] dump_stack_lvl+0xda/0x130 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x700}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 49) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x900}, 0x1c, 0x0}, 0x4008051) [ 3310.450648][T12537] dump_stack+0x15/0x20 [ 3310.450696][T12537] should_fail_ex+0x21f/0x230 [ 3310.450715][T12537] __should_fail_alloc_page+0xfd/0x110 [ 3310.450748][T12537] __alloc_pages+0x108/0x340 [ 3310.450775][T12537] vma_alloc_folio+0x6a3/0x8c0 [ 3310.450841][T12537] shmem_get_folio_gfp+0x801/0x1200 [ 3310.450869][T12537] shmem_write_begin+0xa6/0x1d0 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xa00}, 0x1c, 0x0}, 0x4008051) [ 3310.450943][T12537] generic_perform_write+0x1cf/0x410 [ 3310.450971][T12537] ? shmem_write_begin+0x1d0/0x1d0 [ 3310.450995][T12537] __generic_file_write_iter+0xa1/0x120 [ 3310.451074][T12537] generic_file_write_iter+0x7d/0x1c0 [ 3310.451167][T12537] vfs_write+0x4ab/0x7d0 [ 3310.451199][T12537] ksys_write+0xeb/0x1a0 [ 3310.451225][T12537] __x64_sys_write+0x42/0x50 [ 3310.451250][T12537] do_syscall_64+0x41/0xc0 [ 3310.451331][T12537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3310.451364][T12537] RIP: 0033:0x7ff0343a5ae9 [ 3310.451380][T12537] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3310.451411][T12537] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3310.451432][T12537] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3310.451445][T12537] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3310.451456][T12537] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3310.451467][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3310.451478][T12537] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3310.451492][T12537] [ 3310.491096][T12565] FAULT_INJECTION: forcing a failure. [ 3310.491096][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3310.491118][T12565] CPU: 1 PID: 12565 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3310.491138][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3310.491150][T12565] Call Trace: [ 3310.491156][T12565] [ 3310.491163][T12565] dump_stack_lvl+0xda/0x130 [ 3310.491234][T12565] dump_stack+0x15/0x20 [ 3310.491258][T12565] should_fail_ex+0x21f/0x230 [ 3310.491279][T12565] should_fail+0xb/0x10 [ 3310.491299][T12565] should_fail_usercopy+0x1a/0x20 [ 3310.491321][T12565] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3310.491384][T12565] ? folio_test_hugetlb+0x3a/0x70 [ 3310.491405][T12565] ? shmem_write_begin+0x12a/0x1d0 [ 3310.491457][T12565] generic_perform_write+0x212/0x410 [ 3310.491515][T12565] ? shmem_write_begin+0x1d0/0x1d0 [ 3310.491540][T12565] __generic_file_write_iter+0xa1/0x120 [ 3310.491568][T12565] generic_file_write_iter+0x7d/0x1c0 [ 3310.491641][T12565] vfs_write+0x4ab/0x7d0 [ 3310.491674][T12565] ksys_write+0xeb/0x1a0 [ 3310.491778][T12565] __x64_sys_write+0x42/0x50 [ 3310.491808][T12565] do_syscall_64+0x41/0xc0 [ 3310.491832][T12565] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3310.491913][T12565] RIP: 0033:0x7ff0343a5ae9 [ 3310.491929][T12565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3310.491948][T12565] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x801c581f, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xb00}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 50) 14:58:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x177980, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3310.492005][T12565] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3310.492018][T12565] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3310.492030][T12565] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3310.492041][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3310.492053][T12565] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3310.492068][T12565] 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x3f00}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 51) 14:58:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x177980, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x4000}, 0x1c, 0x0}, 0x4008051) [ 3310.881366][T12591] FAULT_INJECTION: forcing a failure. [ 3310.881366][T12591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3310.894735][T12591] CPU: 0 PID: 12591 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 14:58:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x177980, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x47ee}, 0x1c, 0x0}, 0x4008051) [ 3310.894771][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3310.894781][T12591] Call Trace: [ 3310.894787][T12591] [ 3310.894793][T12591] dump_stack_lvl+0xda/0x130 [ 3310.894821][T12591] dump_stack+0x15/0x20 [ 3310.894861][T12591] should_fail_ex+0x21f/0x230 [ 3310.894954][T12591] __should_fail_alloc_page+0xfd/0x110 [ 3310.895056][T12591] __alloc_pages+0x108/0x340 [ 3310.895081][T12591] vma_alloc_folio+0x6a3/0x8c0 [ 3310.895177][T12591] shmem_get_folio_gfp+0x801/0x1200 [ 3310.895208][T12591] shmem_write_begin+0xa6/0x1d0 [ 3310.895233][T12591] generic_perform_write+0x1cf/0x410 [ 3310.895322][T12591] ? shmem_write_begin+0x1d0/0x1d0 [ 3310.895348][T12591] __generic_file_write_iter+0xa1/0x120 [ 3310.895379][T12591] generic_file_write_iter+0x7d/0x1c0 [ 3310.895441][T12591] vfs_write+0x4ab/0x7d0 [ 3310.895475][T12591] ksys_write+0xeb/0x1a0 [ 3310.895543][T12591] __x64_sys_write+0x42/0x50 [ 3310.895575][T12591] do_syscall_64+0x41/0xc0 [ 3310.895601][T12591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3310.895646][T12591] RIP: 0033:0x7ff0343a5ae9 [ 3310.895662][T12591] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3310.895750][T12591] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3310.895769][T12591] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3310.895788][T12591] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3310.895800][T12591] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3310.895811][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3310.895823][T12591] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3310.895840][T12591] [ 3310.926347][T12603] FAULT_INJECTION: forcing a failure. [ 3310.926347][T12603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3310.926375][T12603] CPU: 0 PID: 12603 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3310.926462][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3310.926473][T12603] Call Trace: [ 3310.926480][T12603] [ 3310.926487][T12603] dump_stack_lvl+0xda/0x130 [ 3310.926540][T12603] dump_stack+0x15/0x20 [ 3310.926565][T12603] should_fail_ex+0x21f/0x230 [ 3310.926592][T12603] should_fail+0xb/0x10 [ 3310.926613][T12603] should_fail_usercopy+0x1a/0x20 [ 3310.926636][T12603] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3310.926680][T12603] ? folio_test_hugetlb+0x3a/0x70 [ 3310.926701][T12603] ? shmem_write_begin+0x12a/0x1d0 [ 3310.926759][T12603] generic_perform_write+0x212/0x410 [ 3310.926853][T12603] ? shmem_write_begin+0x1d0/0x1d0 [ 3310.926877][T12603] __generic_file_write_iter+0xa1/0x120 [ 3310.926935][T12603] generic_file_write_iter+0x7d/0x1c0 [ 3310.927033][T12603] vfs_write+0x4ab/0x7d0 [ 3310.927063][T12603] ksys_write+0xeb/0x1a0 [ 3310.927148][T12603] __x64_sys_write+0x42/0x50 [ 3310.927175][T12603] do_syscall_64+0x41/0xc0 [ 3310.927201][T12603] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3310.927280][T12603] RIP: 0033:0x7ff0343a5ae9 [ 3310.927293][T12603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:26 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x80fe}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 52) 14:58:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x6, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3310.927310][T12603] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3310.927381][T12603] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3310.927393][T12603] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3310.927407][T12603] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3310.927419][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3310.927475][T12603] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3310.927492][T12603] 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xee47}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfe80}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 53) [ 3311.353717][T12621] FAULT_INJECTION: forcing a failure. [ 3311.353717][T12621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3311.367026][T12621] CPU: 0 PID: 12621 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3311.367052][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3311.367067][T12621] Call Trace: 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x40000}, 0x1c, 0x0}, 0x4008051) 14:58:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x100000}, 0x1c, 0x0}, 0x4008051) [ 3311.367073][T12621] [ 3311.367080][T12621] dump_stack_lvl+0xda/0x130 [ 3311.367253][T12621] dump_stack+0x15/0x20 [ 3311.367277][T12621] should_fail_ex+0x21f/0x230 [ 3311.367298][T12621] __should_fail_alloc_page+0xfd/0x110 [ 3311.367319][T12621] __alloc_pages+0x108/0x340 [ 3311.367386][T12621] vma_alloc_folio+0x6a3/0x8c0 [ 3311.367487][T12621] shmem_get_folio_gfp+0x801/0x1200 [ 3311.367525][T12621] shmem_write_begin+0xa6/0x1d0 [ 3311.367613][T12621] generic_perform_write+0x1cf/0x410 [ 3311.367640][T12621] ? shmem_write_begin+0x1d0/0x1d0 [ 3311.367661][T12621] __generic_file_write_iter+0xa1/0x120 [ 3311.367692][T12621] generic_file_write_iter+0x7d/0x1c0 [ 3311.367739][T12621] vfs_write+0x4ab/0x7d0 [ 3311.367767][T12621] ksys_write+0xeb/0x1a0 [ 3311.367846][T12621] __x64_sys_write+0x42/0x50 [ 3311.367877][T12621] do_syscall_64+0x41/0xc0 [ 3311.367903][T12621] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3311.368023][T12621] RIP: 0033:0x7ff0343a5ae9 [ 3311.368039][T12621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3311.368058][T12621] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3311.368078][T12621] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3311.368104][T12621] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3311.368118][T12621] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3311.368131][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3311.368142][T12621] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3311.368156][T12621] [ 3311.405465][T12633] FAULT_INJECTION: forcing a failure. [ 3311.405465][T12633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3311.578973][T12633] CPU: 0 PID: 12633 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3311.589399][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3311.599465][T12633] Call Trace: 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0045878, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x800000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x1000000}, 0x1c, 0x0}, 0x4008051) [ 3311.599472][T12633] [ 3311.599478][T12633] dump_stack_lvl+0xda/0x130 [ 3311.599507][T12633] dump_stack+0x15/0x20 [ 3311.599535][T12633] should_fail_ex+0x21f/0x230 [ 3311.619109][T12633] should_fail+0xb/0x10 [ 3311.619210][T12633] should_fail_usercopy+0x1a/0x20 [ 3311.619233][T12633] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3311.619260][T12633] ? folio_test_hugetlb+0x3a/0x70 [ 3311.619279][T12633] ? shmem_write_begin+0x12a/0x1d0 [ 3311.619321][T12633] generic_perform_write+0x212/0x410 [ 3311.619352][T12633] ? shmem_write_begin+0x1d0/0x1d0 [ 3311.619451][T12633] __generic_file_write_iter+0xa1/0x120 [ 3311.619480][T12633] generic_file_write_iter+0x7d/0x1c0 [ 3311.619556][T12633] vfs_write+0x4ab/0x7d0 [ 3311.619589][T12633] ksys_write+0xeb/0x1a0 [ 3311.619621][T12633] __x64_sys_write+0x42/0x50 [ 3311.619672][T12633] do_syscall_64+0x41/0xc0 [ 3311.619695][T12633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3311.619722][T12633] RIP: 0033:0x7ff0343a5ae9 [ 3311.619737][T12633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3311.619759][T12633] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3311.619781][T12633] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x2000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 54) 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x3000000}, 0x1c, 0x0}, 0x4008051) [ 3311.619852][T12633] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3311.619864][T12633] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3311.619956][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3311.619968][T12633] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3311.619982][T12633] [ 3311.824793][T12664] FAULT_INJECTION: forcing a failure. [ 3311.824793][T12664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3311.838141][T12664] CPU: 1 PID: 12664 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3311.848644][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3311.848658][T12664] Call Trace: [ 3311.848663][T12664] [ 3311.848669][T12664] dump_stack_lvl+0xda/0x130 [ 3311.848698][T12664] dump_stack+0x15/0x20 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0xc020660b, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x4000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x5000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3311.848720][T12664] should_fail_ex+0x21f/0x230 [ 3311.878825][T12664] __should_fail_alloc_page+0xfd/0x110 [ 3311.878882][T12664] __alloc_pages+0x108/0x340 [ 3311.878906][T12664] vma_alloc_folio+0x6a3/0x8c0 [ 3311.893783][T12664] shmem_get_folio_gfp+0x801/0x1200 [ 3311.899016][T12664] shmem_write_begin+0xa6/0x1d0 [ 3311.903932][T12664] generic_perform_write+0x1cf/0x410 [ 3311.909236][T12664] ? shmem_write_begin+0x1d0/0x1d0 [ 3311.914515][T12664] __generic_file_write_iter+0xa1/0x120 14:58:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x600, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x6000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 55) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x7000000}, 0x1c, 0x0}, 0x4008051) [ 3311.920174][T12664] generic_file_write_iter+0x7d/0x1c0 [ 3311.925732][T12664] vfs_write+0x4ab/0x7d0 [ 3311.925812][T12664] ksys_write+0xeb/0x1a0 [ 3311.925844][T12664] __x64_sys_write+0x42/0x50 [ 3311.925874][T12664] do_syscall_64+0x41/0xc0 [ 3311.925920][T12664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3311.925995][T12664] RIP: 0033:0x7ff0343a5ae9 [ 3311.926011][T12664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3311.926034][T12664] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3311.926087][T12664] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3311.926102][T12664] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3311.926116][T12664] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x8000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x3, 0x0, 0xf6, 0x2, "74b978e7f21fafc75e2fb8f4ae632799b0d6f7", 0x9, 0x7fff}) 14:58:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x85c1, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x9000000}, 0x1c, 0x0}, 0x4008051) [ 3311.926127][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3311.926139][T12664] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3311.926154][T12664] [ 3312.000065][T12688] FAULT_INJECTION: forcing a failure. [ 3312.000065][T12688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3312.055291][T12688] CPU: 0 PID: 12688 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xa000000}, 0x1c, 0x0}, 0x4008051) [ 3312.055318][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3312.055331][T12688] Call Trace: [ 3312.055337][T12688] [ 3312.055344][T12688] dump_stack_lvl+0xda/0x130 [ 3312.055376][T12688] dump_stack+0x15/0x20 [ 3312.055460][T12688] should_fail_ex+0x21f/0x230 [ 3312.055483][T12688] should_fail+0xb/0x10 [ 3312.055504][T12688] should_fail_usercopy+0x1a/0x20 [ 3312.055523][T12688] copy_page_from_iter_atomic+0x22d/0xcf0 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xb000000}, 0x1c, 0x0}, 0x4008051) [ 3312.055578][T12688] ? folio_test_hugetlb+0x3a/0x70 [ 3312.055599][T12688] ? shmem_write_begin+0x12a/0x1d0 [ 3312.055620][T12688] generic_perform_write+0x212/0x410 [ 3312.055691][T12688] ? shmem_write_begin+0x1d0/0x1d0 [ 3312.055718][T12688] __generic_file_write_iter+0xa1/0x120 [ 3312.055756][T12688] generic_file_write_iter+0x7d/0x1c0 [ 3312.055782][T12688] vfs_write+0x4ab/0x7d0 [ 3312.055814][T12688] ksys_write+0xeb/0x1a0 [ 3312.055851][T12688] __x64_sys_write+0x42/0x50 [ 3312.055929][T12688] do_syscall_64+0x41/0xc0 [ 3312.055953][T12688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.056107][T12688] RIP: 0033:0x7ff0343a5ae9 [ 3312.056120][T12688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x10000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 56) 14:58:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xc185, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x3, 0x0, 0xf6, 0x2, "74b978e7f21fafc75e2fb8f4ae632799b0d6f7", 0x9, 0x7fff}) [ 3312.056164][T12688] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3312.056184][T12688] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3312.056199][T12688] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3312.056213][T12688] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3312.056226][T12688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3312.056238][T12688] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3312.056277][T12688] 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x3f000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x5, 0x3, 0x0, 0xf6, 0x2, "74b978e7f21fafc75e2fb8f4ae632799b0d6f7", 0x9, 0x7fff}) [ 3312.303181][T12714] FAULT_INJECTION: forcing a failure. [ 3312.303181][T12714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3312.317179][T12714] CPU: 0 PID: 12714 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3312.327699][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3312.338426][T12714] Call Trace: [ 3312.338433][T12714] [ 3312.338445][T12714] dump_stack_lvl+0xda/0x130 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x40000000}, 0x1c, 0x0}, 0x4008051) 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x47ee0000}, 0x1c, 0x0}, 0x4008051) [ 3312.338475][T12714] dump_stack+0x15/0x20 [ 3312.338499][T12714] should_fail_ex+0x21f/0x230 [ 3312.338524][T12714] __should_fail_alloc_page+0xfd/0x110 [ 3312.338550][T12714] __alloc_pages+0x108/0x340 [ 3312.338576][T12714] vma_alloc_folio+0x6a3/0x8c0 [ 3312.338603][T12714] shmem_get_folio_gfp+0x801/0x1200 [ 3312.338629][T12714] shmem_write_begin+0xa6/0x1d0 [ 3312.338660][T12714] generic_perform_write+0x1cf/0x410 [ 3312.338690][T12714] ? shmem_write_begin+0x1d0/0x1d0 [ 3312.338715][T12714] __generic_file_write_iter+0xa1/0x120 14:58:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) [ 3312.338775][T12714] generic_file_write_iter+0x7d/0x1c0 [ 3312.338800][T12714] vfs_write+0x4ab/0x7d0 [ 3312.338836][T12714] ksys_write+0xeb/0x1a0 [ 3312.338862][T12714] __x64_sys_write+0x42/0x50 [ 3312.338901][T12714] do_syscall_64+0x41/0xc0 [ 3312.422830][T12714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.422870][T12714] RIP: 0033:0x7ff0343a5ae9 [ 3312.433155][T12714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:28 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 57) 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x7ffffff7}, 0x1c, 0x0}, 0x4008051) [ 3312.452786][T12714] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3312.461244][T12714] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3312.469236][T12714] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3312.477381][T12714] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3312.477396][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3312.477404][T12714] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3312.477438][T12714] [ 3312.500825][T12747] FAULT_INJECTION: forcing a failure. [ 3312.500825][T12747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3312.500850][T12747] CPU: 1 PID: 12747 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3312.500895][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3312.500907][T12747] Call Trace: [ 3312.500914][T12747] [ 3312.500927][T12747] dump_stack_lvl+0xda/0x130 [ 3312.500956][T12747] dump_stack+0x15/0x20 [ 3312.500976][T12747] should_fail_ex+0x21f/0x230 [ 3312.500998][T12747] should_fail+0xb/0x10 [ 3312.501056][T12747] should_fail_usercopy+0x1a/0x20 [ 3312.501130][T12747] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3312.501161][T12747] ? folio_test_hugetlb+0x3a/0x70 [ 3312.501184][T12747] ? shmem_write_begin+0x12a/0x1d0 [ 3312.501275][T12747] generic_perform_write+0x212/0x410 [ 3312.501304][T12747] ? shmem_write_begin+0x1d0/0x1d0 [ 3312.501326][T12747] __generic_file_write_iter+0xa1/0x120 [ 3312.501369][T12747] generic_file_write_iter+0x7d/0x1c0 [ 3312.501424][T12747] vfs_write+0x4ab/0x7d0 [ 3312.501452][T12747] ksys_write+0xeb/0x1a0 [ 3312.501479][T12747] __x64_sys_write+0x42/0x50 [ 3312.627052][T12747] do_syscall_64+0x41/0xc0 [ 3312.627102][T12747] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.637731][T12747] RIP: 0033:0x7ff0343a5ae9 [ 3312.637747][T12747] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3312.662166][T12747] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3312.670641][T12747] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3312.678691][T12747] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3312.686790][T12747] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3312.694760][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:58:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fff) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x97ffffff}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xeffdffff}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3312.703077][T12747] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3312.711163][T12747] 14:58:28 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 58) 14:58:28 executing program 0: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "87f5df28126c48c0", "c79620715bc57cd51d98b1a795d43d3d", "a2ba2c00", "55729a52dbc75700"}, 0x28) syz_open_pts(0xffffffffffffffff, 0x202) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xf5ffffff}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x4000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x6000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xf7ffff7f}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 0: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "87f5df28126c48c0", "c79620715bc57cd51d98b1a795d43d3d", "a2ba2c00", "55729a52dbc75700"}, 0x28) syz_open_pts(0xffffffffffffffff, 0x202) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3312.930031][T12787] FAULT_INJECTION: forcing a failure. [ 3312.930031][T12787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3312.943343][T12787] CPU: 1 PID: 12787 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3312.953810][T12787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3312.963900][T12787] Call Trace: [ 3312.967264][T12787] [ 3312.970200][T12787] dump_stack_lvl+0xda/0x130 [ 3312.974800][T12787] dump_stack+0x15/0x20 14:58:28 executing program 0: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "87f5df28126c48c0", "c79620715bc57cd51d98b1a795d43d3d", "a2ba2c00", "55729a52dbc75700"}, 0x28) (async) syz_open_pts(0xffffffffffffffff, 0x202) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:28 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 59) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfe800000}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10043, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3312.979036][T12787] should_fail_ex+0x21f/0x230 [ 3312.983755][T12787] __should_fail_alloc_page+0xfd/0x110 [ 3312.989452][T12787] __alloc_pages+0x108/0x340 [ 3312.989478][T12787] vma_alloc_folio+0x6a3/0x8c0 [ 3312.989506][T12787] shmem_get_folio_gfp+0x801/0x1200 [ 3312.989536][T12787] shmem_write_begin+0xa6/0x1d0 [ 3312.989558][T12787] generic_perform_write+0x1cf/0x410 [ 3312.989657][T12787] ? shmem_write_begin+0x1d0/0x1d0 14:58:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10043, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xff010000}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3312.989677][T12787] __generic_file_write_iter+0xa1/0x120 [ 3312.989703][T12787] generic_file_write_iter+0x7d/0x1c0 [ 3312.989797][T12787] vfs_write+0x4ab/0x7d0 [ 3312.989829][T12787] ksys_write+0xeb/0x1a0 [ 3312.989918][T12787] __x64_sys_write+0x42/0x50 [ 3312.989957][T12787] do_syscall_64+0x41/0xc0 [ 3312.990068][T12787] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.990102][T12787] RIP: 0033:0x7ff0343a5ae9 14:58:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xc1850000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10043, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffdef}, 0x1c, 0x0}, 0x4008051) 14:58:28 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3312.990116][T12787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3312.990137][T12787] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3312.990159][T12787] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3312.990174][T12787] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3312.990243][T12787] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3312.990256][T12787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3312.990270][T12787] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3312.990381][T12787] [ 3313.093133][T12816] FAULT_INJECTION: forcing a failure. [ 3313.093133][T12816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3313.157288][T12816] CPU: 0 PID: 12816 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3313.157314][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3313.157391][T12816] Call Trace: [ 3313.157397][T12816] [ 3313.157404][T12816] dump_stack_lvl+0xda/0x130 [ 3313.157437][T12816] dump_stack+0x15/0x20 [ 3313.157463][T12816] should_fail_ex+0x21f/0x230 [ 3313.157485][T12816] should_fail+0xb/0x10 [ 3313.157540][T12816] should_fail_usercopy+0x1a/0x20 [ 3313.157573][T12816] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3313.157603][T12816] ? folio_test_hugetlb+0x3a/0x70 [ 3313.157626][T12816] ? shmem_write_begin+0x12a/0x1d0 [ 3313.157698][T12816] generic_perform_write+0x212/0x410 [ 3313.157726][T12816] ? shmem_write_begin+0x1d0/0x1d0 [ 3313.157750][T12816] __generic_file_write_iter+0xa1/0x120 [ 3313.157836][T12816] generic_file_write_iter+0x7d/0x1c0 [ 3313.157873][T12816] vfs_write+0x4ab/0x7d0 [ 3313.157948][T12816] ksys_write+0xeb/0x1a0 [ 3313.157978][T12816] __x64_sys_write+0x42/0x50 [ 3313.158007][T12816] do_syscall_64+0x41/0xc0 [ 3313.158066][T12816] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3313.158096][T12816] RIP: 0033:0x7ff0343a5ae9 14:58:28 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 60) 14:58:28 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x101, 0x6, 0x6}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x480300, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 14:58:28 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3313.158111][T12816] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3313.158131][T12816] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3313.158195][T12816] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3313.158289][T12816] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3313.158373][T12816] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3313.158388][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3313.158402][T12816] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3313.158418][T12816] [ 3313.323205][T12830] FAULT_INJECTION: forcing a failure. [ 3313.323205][T12830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3313.323234][T12830] CPU: 0 PID: 12830 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3313.323300][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3313.323312][T12830] Call Trace: [ 3313.323318][T12830] [ 3313.323326][T12830] dump_stack_lvl+0xda/0x130 [ 3313.323395][T12830] dump_stack+0x15/0x20 [ 3313.323447][T12830] should_fail_ex+0x21f/0x230 [ 3313.323470][T12830] __should_fail_alloc_page+0xfd/0x110 [ 3313.323496][T12830] __alloc_pages+0x108/0x340 [ 3313.323555][T12830] vma_alloc_folio+0x6a3/0x8c0 [ 3313.323640][T12830] shmem_get_folio_gfp+0x801/0x1200 [ 3313.323671][T12830] shmem_write_begin+0xa6/0x1d0 [ 3313.323692][T12830] generic_perform_write+0x1cf/0x410 [ 3313.323765][T12830] ? shmem_write_begin+0x1d0/0x1d0 [ 3313.323788][T12830] __generic_file_write_iter+0xa1/0x120 [ 3313.323814][T12830] generic_file_write_iter+0x7d/0x1c0 [ 3313.323933][T12830] vfs_write+0x4ab/0x7d0 [ 3313.324013][T12830] ksys_write+0xeb/0x1a0 [ 3313.324048][T12830] __x64_sys_write+0x42/0x50 [ 3313.324077][T12830] do_syscall_64+0x41/0xc0 [ 3313.324104][T12830] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3313.324135][T12830] RIP: 0033:0x7ff0343a5ae9 [ 3313.324159][T12830] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3313.324177][T12830] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3313.324197][T12830] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xffffff7f}, 0x1c, 0x0}, 0x4008051) 14:58:29 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 61) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x101, 0x6, 0x6}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x480300, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 14:58:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xfdfdffff, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3313.324211][T12830] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3313.324224][T12830] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3313.324238][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3313.324249][T12830] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3313.324263][T12830] 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xffffff97}, 0x1c, 0x0}, 0x4008051) 14:58:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 62) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffff5}, 0x1c, 0x0}, 0x4008051) [ 3313.602707][T12837] FAULT_INJECTION: forcing a failure. [ 3313.602707][T12837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3313.616016][T12837] CPU: 1 PID: 12837 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3313.626447][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:29 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 63) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x2, 0x0}, 0x4008051) [ 3313.626464][T12837] Call Trace: [ 3313.626470][T12837] [ 3313.626508][T12837] dump_stack_lvl+0xda/0x130 [ 3313.626538][T12837] dump_stack+0x15/0x20 [ 3313.626559][T12837] should_fail_ex+0x21f/0x230 [ 3313.626579][T12837] __should_fail_alloc_page+0xfd/0x110 [ 3313.626602][T12837] __alloc_pages+0x108/0x340 [ 3313.626681][T12837] vma_alloc_folio+0x6a3/0x8c0 [ 3313.626810][T12837] shmem_get_folio_gfp+0x801/0x1200 [ 3313.626839][T12837] shmem_write_begin+0xa6/0x1d0 [ 3313.626860][T12837] generic_perform_write+0x1cf/0x410 [ 3313.626891][T12837] ? shmem_write_begin+0x1d0/0x1d0 [ 3313.626929][T12837] __generic_file_write_iter+0xa1/0x120 [ 3313.626960][T12837] generic_file_write_iter+0x7d/0x1c0 [ 3313.627023][T12837] vfs_write+0x4ab/0x7d0 [ 3313.627051][T12837] ksys_write+0xeb/0x1a0 [ 3313.627082][T12837] __x64_sys_write+0x42/0x50 [ 3313.627187][T12837] do_syscall_64+0x41/0xc0 [ 3313.627213][T12837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3313.627245][T12837] RIP: 0033:0x7ff0343a5ae9 [ 3313.627261][T12837] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3313.627283][T12837] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3313.627369][T12837] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3313.627383][T12837] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3313.627397][T12837] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3313.627410][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3313.627423][T12837] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3313.627440][T12837] [ 3313.651066][T12850] FAULT_INJECTION: forcing a failure. [ 3313.651066][T12850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3313.651091][T12850] CPU: 0 PID: 12850 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3313.651115][T12850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3313.651125][T12850] Call Trace: [ 3313.651131][T12850] [ 3313.651137][T12850] dump_stack_lvl+0xda/0x130 [ 3313.651165][T12850] dump_stack+0x15/0x20 [ 3313.651194][T12850] should_fail_ex+0x21f/0x230 [ 3313.651214][T12850] __should_fail_alloc_page+0xfd/0x110 [ 3313.651253][T12850] __alloc_pages+0x108/0x340 [ 3313.651305][T12850] vma_alloc_folio+0x6a3/0x8c0 [ 3313.651329][T12850] shmem_get_folio_gfp+0x801/0x1200 [ 3313.651361][T12850] shmem_write_begin+0xa6/0x1d0 [ 3313.651445][T12850] generic_perform_write+0x1cf/0x410 [ 3313.651542][T12850] ? shmem_write_begin+0x1d0/0x1d0 [ 3313.651567][T12850] __generic_file_write_iter+0xa1/0x120 [ 3313.651597][T12850] generic_file_write_iter+0x7d/0x1c0 [ 3313.651627][T12850] vfs_write+0x4ab/0x7d0 [ 3313.651695][T12850] ksys_write+0xeb/0x1a0 [ 3313.651724][T12850] __x64_sys_write+0x42/0x50 [ 3313.651750][T12850] do_syscall_64+0x41/0xc0 [ 3313.651793][T12850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3313.651936][T12850] RIP: 0033:0x7ff0343a5ae9 [ 3313.651950][T12850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3313.651971][T12850] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3313.651992][T12850] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3313.652007][T12850] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3313.652084][T12850] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3313.652096][T12850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3313.652107][T12850] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3313.652168][T12850] [ 3313.684703][T12858] FAULT_INJECTION: forcing a failure. [ 3313.684703][T12858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3313.684725][T12858] CPU: 0 PID: 12858 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3313.684745][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3313.684795][T12858] Call Trace: [ 3313.684800][T12858] [ 3313.684806][T12858] dump_stack_lvl+0xda/0x130 [ 3313.684831][T12858] dump_stack+0x15/0x20 [ 3313.684851][T12858] should_fail_ex+0x21f/0x230 [ 3313.684870][T12858] should_fail+0xb/0x10 [ 3313.684892][T12858] should_fail_usercopy+0x1a/0x20 [ 3313.684994][T12858] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3313.685027][T12858] ? folio_test_hugetlb+0x3a/0x70 [ 3313.685049][T12858] ? shmem_write_begin+0x12a/0x1d0 [ 3313.685074][T12858] generic_perform_write+0x212/0x410 14:58:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x101, 0x6, 0x6}}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x480300, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="e3f4ffff000000000a004e240000000800000000000000000000000000000001000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2200000001fc000000000000000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad59d3dff100000000f1ffffffffffffff00000023f696e2edfd977f92525c177a51adf04e3fb86a8b2ef4d2800013009f002ef7414a57"], 0x110) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) [ 3313.685105][T12858] ? shmem_write_begin+0x1d0/0x1d0 [ 3313.685191][T12858] __generic_file_write_iter+0xa1/0x120 [ 3313.685221][T12858] generic_file_write_iter+0x7d/0x1c0 [ 3314.122757][T12858] vfs_write+0x4ab/0x7d0 [ 3314.127065][T12858] ksys_write+0xeb/0x1a0 [ 3314.131394][T12858] __x64_sys_write+0x42/0x50 [ 3314.136132][T12858] do_syscall_64+0x41/0xc0 [ 3314.136163][T12858] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.136224][T12858] RIP: 0033:0x7ff0343a5ae9 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1b, 0x0}, 0x4008051) [ 3314.136241][T12858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3314.136271][T12858] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3314.136298][T12858] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xfffffdfd, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x2}, 0x4008051) 14:58:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa4480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xee, 0x11, &(0x7f0000000040)}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000480)) ioctl$TCSETSW2(r1, 0x5453, 0x0) [ 3314.136313][T12858] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3314.136328][T12858] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3314.136342][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.136356][T12858] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3314.136406][T12858] 14:58:29 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 64) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x3}, 0x4008051) 14:58:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa4480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xee, 0x11, &(0x7f0000000040)}) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xee, 0x11, &(0x7f0000000040)}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000480)) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x4}, 0x4008051) 14:58:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x5}, 0x4008051) 14:58:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000003, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa4480, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xee, 0x11, &(0x7f0000000040)}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000480)) ioctl$TCSETSW2(r1, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa4480, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xee, 0x11, &(0x7f0000000040)}) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000480)) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) [ 3314.356570][T12899] FAULT_INJECTION: forcing a failure. [ 3314.356570][T12899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3314.369839][T12899] CPU: 1 PID: 12899 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3314.369861][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3314.369874][T12899] Call Trace: 14:58:29 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 65) 14:58:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x6}, 0x4008051) 14:58:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xb, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:29 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7c801, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x7}, 0x4008051) [ 3314.369882][T12899] [ 3314.369889][T12899] dump_stack_lvl+0xda/0x130 [ 3314.369980][T12899] dump_stack+0x15/0x20 [ 3314.370002][T12899] should_fail_ex+0x21f/0x230 [ 3314.370026][T12899] __should_fail_alloc_page+0xfd/0x110 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) [ 3314.370052][T12899] __alloc_pages+0x108/0x340 [ 3314.370141][T12899] vma_alloc_folio+0x6a3/0x8c0 [ 3314.370206][T12899] shmem_get_folio_gfp+0x801/0x1200 [ 3314.370295][T12899] shmem_write_begin+0xa6/0x1d0 [ 3314.370314][T12899] generic_perform_write+0x1cf/0x410 [ 3314.370345][T12899] ? shmem_write_begin+0x1d0/0x1d0 [ 3314.370370][T12899] __generic_file_write_iter+0xa1/0x120 [ 3314.370466][T12899] generic_file_write_iter+0x7d/0x1c0 [ 3314.370494][T12899] vfs_write+0x4ab/0x7d0 [ 3314.370567][T12899] ksys_write+0xeb/0x1a0 [ 3314.370659][T12899] __x64_sys_write+0x42/0x50 [ 3314.370687][T12899] do_syscall_64+0x41/0xc0 [ 3314.370765][T12899] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.370810][T12899] RIP: 0033:0x7ff0343a5ae9 [ 3314.370826][T12899] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3314.370848][T12899] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3314.370869][T12899] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3314.370884][T12899] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3314.370897][T12899] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3314.370959][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.370972][T12899] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3314.370988][T12899] [ 3314.435415][T12918] FAULT_INJECTION: forcing a failure. [ 3314.435415][T12918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3314.435525][T12918] CPU: 0 PID: 12918 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3314.435546][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3314.435557][T12918] Call Trace: [ 3314.435562][T12918] [ 3314.435568][T12918] dump_stack_lvl+0xda/0x130 [ 3314.435634][T12918] dump_stack+0x15/0x20 [ 3314.435663][T12918] should_fail_ex+0x21f/0x230 [ 3314.435682][T12918] should_fail+0xb/0x10 [ 3314.435698][T12918] should_fail_usercopy+0x1a/0x20 [ 3314.435718][T12918] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3314.435819][T12918] ? folio_test_hugetlb+0x3a/0x70 [ 3314.435875][T12918] ? shmem_write_begin+0x12a/0x1d0 [ 3314.435968][T12918] generic_perform_write+0x212/0x410 [ 3314.436077][T12918] ? shmem_write_begin+0x1d0/0x1d0 [ 3314.436115][T12918] __generic_file_write_iter+0xa1/0x120 [ 3314.436145][T12918] generic_file_write_iter+0x7d/0x1c0 [ 3314.436172][T12918] vfs_write+0x4ab/0x7d0 [ 3314.436212][T12918] ksys_write+0xeb/0x1a0 [ 3314.436239][T12918] __x64_sys_write+0x42/0x50 [ 3314.436277][T12918] do_syscall_64+0x41/0xc0 [ 3314.436303][T12918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.436334][T12918] RIP: 0033:0x7ff0343a5ae9 [ 3314.436371][T12918] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3314.436391][T12918] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3314.436464][T12918] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3314.436479][T12918] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3314.436493][T12918] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x8}, 0x4008051) 14:58:30 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7c801, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:30 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 66) 14:58:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000004, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x9}, 0x4008051) 14:58:30 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7c801, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7c801, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3314.436507][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.436521][T12918] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3314.436558][T12918] [ 3314.848956][T12932] FAULT_INJECTION: forcing a failure. [ 3314.848956][T12932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 0: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) [ 3314.862315][T12932] CPU: 0 PID: 12932 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3314.872852][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3314.882924][T12932] Call Trace: [ 3314.882932][T12932] [ 3314.882939][T12932] dump_stack_lvl+0xda/0x130 [ 3314.893808][T12932] dump_stack+0x15/0x20 [ 3314.893839][T12932] should_fail_ex+0x21f/0x230 [ 3314.893864][T12932] __should_fail_alloc_page+0xfd/0x110 [ 3314.893965][T12932] __alloc_pages+0x108/0x340 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xa}, 0x4008051) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xb}, 0x4008051) [ 3314.893987][T12932] vma_alloc_folio+0x6a3/0x8c0 [ 3314.894038][T12932] shmem_get_folio_gfp+0x801/0x1200 [ 3314.894071][T12932] shmem_write_begin+0xa6/0x1d0 [ 3314.894093][T12932] generic_perform_write+0x1cf/0x410 [ 3314.894120][T12932] ? shmem_write_begin+0x1d0/0x1d0 [ 3314.894170][T12932] __generic_file_write_iter+0xa1/0x120 [ 3314.943776][T12932] generic_file_write_iter+0x7d/0x1c0 [ 3314.943836][T12932] vfs_write+0x4ab/0x7d0 [ 3314.943864][T12932] ksys_write+0xeb/0x1a0 [ 3314.943894][T12932] __x64_sys_write+0x42/0x50 [ 3314.943953][T12932] do_syscall_64+0x41/0xc0 [ 3314.943979][T12932] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.944011][T12932] RIP: 0033:0x7ff0343a5ae9 [ 3314.944027][T12932] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3314.944114][T12932] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x4, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 67) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x10}, 0x4008051) 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000006, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3314.944134][T12932] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3314.944147][T12932] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3314.944161][T12932] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3314.944174][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3314.944187][T12932] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3314.944247][T12932] 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x300}, 0x4008051) 14:58:30 executing program 0: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) [ 3315.078162][T12962] FAULT_INJECTION: forcing a failure. [ 3315.078162][T12962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3315.091643][T12962] CPU: 1 PID: 12962 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3315.102120][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x500}, 0x4008051) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x600}, 0x4008051) [ 3315.102134][T12962] Call Trace: [ 3315.102140][T12962] [ 3315.102148][T12962] dump_stack_lvl+0xda/0x130 [ 3315.102330][T12962] dump_stack+0x15/0x20 [ 3315.102357][T12962] should_fail_ex+0x21f/0x230 [ 3315.102377][T12962] should_fail+0xb/0x10 [ 3315.102393][T12962] should_fail_usercopy+0x1a/0x20 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x700}, 0x4008051) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x900}, 0x4008051) [ 3315.102412][T12962] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3315.102443][T12962] ? folio_test_hugetlb+0x3a/0x70 [ 3315.102465][T12962] ? shmem_write_begin+0x12a/0x1d0 [ 3315.102489][T12962] generic_perform_write+0x212/0x410 [ 3315.102521][T12962] ? shmem_write_begin+0x1d0/0x1d0 [ 3315.102546][T12962] __generic_file_write_iter+0xa1/0x120 [ 3315.102642][T12962] generic_file_write_iter+0x7d/0x1c0 [ 3315.102667][T12962] vfs_write+0x4ab/0x7d0 [ 3315.102758][T12962] ksys_write+0xeb/0x1a0 [ 3315.102786][T12962] __x64_sys_write+0x42/0x50 [ 3315.102824][T12962] do_syscall_64+0x41/0xc0 [ 3315.102855][T12962] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3315.102942][T12962] RIP: 0033:0x7ff0343a5ae9 [ 3315.103016][T12962] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3315.103036][T12962] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3315.103057][T12962] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3315.103070][T12962] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3315.103082][T12962] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3315.103096][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:58:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x6, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xa00}, 0x4008051) 14:58:30 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 68) 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000300, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 0: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) [ 3315.103108][T12962] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3315.103145][T12962] [ 3315.362005][T12991] FAULT_INJECTION: forcing a failure. [ 3315.362005][T12991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3315.375334][T12991] CPU: 1 PID: 12991 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3315.385792][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3315.395970][T12991] Call Trace: [ 3315.399306][T12991] [ 3315.402241][T12991] dump_stack_lvl+0xda/0x130 [ 3315.406848][T12991] dump_stack+0x15/0x20 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xb00}, 0x4008051) 14:58:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xa}, 0x4008051) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x3f00}, 0x4008051) 14:58:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x4000}, 0x4008051) 14:58:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 69) [ 3315.411018][T12991] should_fail_ex+0x21f/0x230 [ 3315.415714][T12991] __should_fail_alloc_page+0xfd/0x110 [ 3315.421199][T12991] __alloc_pages+0x108/0x340 [ 3315.425842][T12991] vma_alloc_folio+0x6a3/0x8c0 [ 3315.425889][T12991] shmem_get_folio_gfp+0x801/0x1200 [ 3315.425922][T12991] shmem_write_begin+0xa6/0x1d0 [ 3315.425948][T12991] generic_perform_write+0x1cf/0x410 [ 3315.426017][T12991] ? shmem_write_begin+0x1d0/0x1d0 [ 3315.426050][T12991] __generic_file_write_iter+0xa1/0x120 [ 3315.426078][T12991] generic_file_write_iter+0x7d/0x1c0 [ 3315.426139][T12991] vfs_write+0x4ab/0x7d0 [ 3315.426166][T12991] ksys_write+0xeb/0x1a0 [ 3315.426247][T12991] __x64_sys_write+0x42/0x50 [ 3315.426317][T12991] do_syscall_64+0x41/0xc0 [ 3315.426341][T12991] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3315.426405][T12991] RIP: 0033:0x7ff0343a5ae9 [ 3315.426420][T12991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3315.426464][T12991] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3315.426549][T12991] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3315.426564][T12991] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3315.426579][T12991] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3315.426592][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.426657][T12991] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3315.426673][T12991] [ 3315.460372][T13011] FAULT_INJECTION: forcing a failure. [ 3315.460372][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3315.591548][T13011] CPU: 0 PID: 13011 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3315.591574][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x300, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0xe63f}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x47ee}, 0x4008051) 14:58:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3315.591586][T13011] Call Trace: [ 3315.591593][T13011] [ 3315.591599][T13011] dump_stack_lvl+0xda/0x130 [ 3315.622937][T13011] dump_stack+0x15/0x20 [ 3315.627111][T13011] should_fail_ex+0x21f/0x230 [ 3315.631807][T13011] should_fail+0xb/0x10 [ 3315.636054][T13011] should_fail_usercopy+0x1a/0x20 [ 3315.641148][T13011] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3315.646942][T13011] ? folio_test_hugetlb+0x3a/0x70 [ 3315.651990][T13011] ? shmem_write_begin+0x12a/0x1d0 [ 3315.652046][T13011] generic_perform_write+0x212/0x410 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0xe63f}) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0xe63f}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x600, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3315.652151][T13011] ? shmem_write_begin+0x1d0/0x1d0 [ 3315.652171][T13011] __generic_file_write_iter+0xa1/0x120 [ 3315.652200][T13011] generic_file_write_iter+0x7d/0x1c0 [ 3315.678736][T13011] vfs_write+0x4ab/0x7d0 [ 3315.678771][T13011] ksys_write+0xeb/0x1a0 [ 3315.687248][T13011] __x64_sys_write+0x42/0x50 [ 3315.691928][T13011] do_syscall_64+0x41/0xc0 [ 3315.696366][T13011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3315.702326][T13011] RIP: 0033:0x7ff0343a5ae9 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x80fe}, 0x4008051) 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0xe63f}) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x2, 0xe63f}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xee47}, 0x4008051) [ 3315.706804][T13011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3315.726442][T13011] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3315.734870][T13011] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3315.742858][T13011] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3315.742876][T13011] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3315.742889][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.766903][T13011] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3315.766924][T13011] 14:58:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 70) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xfe80}, 0x4008051) 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x85c1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1002b86, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1, 0x3, 0x6, 0x0, 0x3f}, &(0x7f0000000340)=0x20) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:31 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xc185, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xff01}, 0x4008051) 14:58:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x100862b, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3315.922050][T13052] FAULT_INJECTION: forcing a failure. [ 3315.922050][T13052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3315.935316][T13052] CPU: 1 PID: 13052 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3315.935343][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3315.935356][T13052] Call Trace: [ 3315.935362][T13052] [ 3315.935369][T13052] dump_stack_lvl+0xda/0x130 [ 3315.966722][T13052] dump_stack+0x15/0x20 14:58:31 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x1000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) (async, rerun: 32) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1, 0x3, 0x6, 0x0, 0x3f}, &(0x7f0000000340)=0x20) (rerun: 32) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 71) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x40000}, 0x4008051) [ 3315.971111][T13052] should_fail_ex+0x21f/0x230 [ 3315.975804][T13052] __should_fail_alloc_page+0xfd/0x110 [ 3315.975829][T13052] __alloc_pages+0x108/0x340 [ 3315.975933][T13052] vma_alloc_folio+0x6a3/0x8c0 [ 3315.976036][T13052] shmem_get_folio_gfp+0x801/0x1200 [ 3315.976065][T13052] shmem_write_begin+0xa6/0x1d0 [ 3315.976084][T13052] generic_perform_write+0x1cf/0x410 [ 3315.976205][T13052] ? shmem_write_begin+0x1d0/0x1d0 [ 3315.976233][T13052] __generic_file_write_iter+0xa1/0x120 [ 3315.976331][T13052] generic_file_write_iter+0x7d/0x1c0 [ 3315.976608][T13052] vfs_write+0x4ab/0x7d0 [ 3315.976634][T13052] ksys_write+0xeb/0x1a0 [ 3315.976659][T13052] __x64_sys_write+0x42/0x50 [ 3315.976722][T13052] do_syscall_64+0x41/0xc0 [ 3315.976746][T13052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3315.976795][T13052] RIP: 0033:0x7ff0343a5ae9 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x100000}, 0x4008051) 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x800000}, 0x4008051) 14:58:31 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1, 0x3, 0x6, 0x0, 0x3f}, &(0x7f0000000340)=0x20) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3315.976809][T13052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3315.976830][T13052] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3315.976894][T13052] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3315.976909][T13052] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3315.976921][T13052] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x2000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x1000000}, 0x4008051) 14:58:31 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x27d0, 0x1]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/253) 14:58:31 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3315.977059][T13052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3315.977073][T13052] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3315.977089][T13052] [ 3316.033632][T13071] FAULT_INJECTION: forcing a failure. [ 3316.033632][T13071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3316.152549][T13071] CPU: 1 PID: 13071 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3316.162986][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3316.173055][T13071] Call Trace: [ 3316.173061][T13071] [ 3316.173068][T13071] dump_stack_lvl+0xda/0x130 [ 3316.183859][T13071] dump_stack+0x15/0x20 [ 3316.183904][T13071] should_fail_ex+0x21f/0x230 [ 3316.183924][T13071] should_fail+0xb/0x10 [ 3316.184021][T13071] should_fail_usercopy+0x1a/0x20 [ 3316.184041][T13071] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3316.207870][T13071] ? folio_test_hugetlb+0x3a/0x70 [ 3316.207970][T13071] ? shmem_write_begin+0x12a/0x1d0 [ 3316.208032][T13071] generic_perform_write+0x212/0x410 [ 3316.208060][T13071] ? shmem_write_begin+0x1d0/0x1d0 [ 3316.208086][T13071] __generic_file_write_iter+0xa1/0x120 [ 3316.208112][T13071] generic_file_write_iter+0x7d/0x1c0 [ 3316.208177][T13071] vfs_write+0x4ab/0x7d0 [ 3316.208209][T13071] ksys_write+0xeb/0x1a0 [ 3316.208235][T13071] __x64_sys_write+0x42/0x50 [ 3316.208327][T13071] do_syscall_64+0x41/0xc0 [ 3316.208350][T13071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3316.208381][T13071] RIP: 0033:0x7ff0343a5ae9 [ 3316.208444][T13071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3316.208470][T13071] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3316.208497][T13071] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3316.208508][T13071] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 72) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x2000000}, 0x4008051) [ 3316.208520][T13071] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3316.208637][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.208650][T13071] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3316.208665][T13071] [ 3316.354044][T13099] FAULT_INJECTION: forcing a failure. [ 3316.354044][T13099] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x3000000}, 0x4008051) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x4000000}, 0x4008051) 14:58:31 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x5000000}, 0x4008051) 14:58:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 73) [ 3316.370518][T13099] CPU: 0 PID: 13099 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3316.370546][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3316.391436][T13099] Call Trace: [ 3316.391443][T13099] [ 3316.391449][T13099] dump_stack_lvl+0xda/0x130 [ 3316.391476][T13099] dump_stack+0x15/0x20 [ 3316.391500][T13099] should_fail_ex+0x21f/0x230 [ 3316.391524][T13099] __should_fail_alloc_page+0xfd/0x110 [ 3316.391550][T13099] __alloc_pages+0x108/0x340 [ 3316.391617][T13099] vma_alloc_folio+0x6a3/0x8c0 [ 3316.391646][T13099] shmem_get_folio_gfp+0x801/0x1200 [ 3316.391693][T13099] shmem_write_begin+0xa6/0x1d0 [ 3316.391718][T13099] generic_perform_write+0x1cf/0x410 [ 3316.391772][T13099] ? shmem_write_begin+0x1d0/0x1d0 [ 3316.391793][T13099] __generic_file_write_iter+0xa1/0x120 [ 3316.391819][T13099] generic_file_write_iter+0x7d/0x1c0 [ 3316.391925][T13099] vfs_write+0x4ab/0x7d0 [ 3316.392010][T13099] ksys_write+0xeb/0x1a0 [ 3316.392042][T13099] __x64_sys_write+0x42/0x50 [ 3316.392073][T13099] do_syscall_64+0x41/0xc0 [ 3316.392156][T13099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3316.392183][T13099] RIP: 0033:0x7ff0343a5ae9 [ 3316.392196][T13099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3316.392269][T13099] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3316.392346][T13099] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3316.392359][T13099] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3316.392371][T13099] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3316.392448][T13099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.392467][T13099] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3316.392484][T13099] [ 3316.428531][T13108] FAULT_INJECTION: forcing a failure. 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x6000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x6000000}, 0x4008051) 14:58:32 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x27d0, 0x1]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async, rerun: 32) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/253) (rerun: 32) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x4000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3316.428531][T13108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3316.580935][T13108] CPU: 1 PID: 13108 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3316.591390][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3316.601458][T13108] Call Trace: [ 3316.601466][T13108] [ 3316.601472][T13108] dump_stack_lvl+0xda/0x130 [ 3316.601503][T13108] dump_stack+0x15/0x20 [ 3316.601584][T13108] should_fail_ex+0x21f/0x230 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x7000000}, 0x4008051) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x8000000}, 0x4008051) [ 3316.621270][T13108] should_fail+0xb/0x10 [ 3316.621299][T13108] should_fail_usercopy+0x1a/0x20 [ 3316.621343][T13108] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3316.621450][T13108] ? folio_test_hugetlb+0x3a/0x70 [ 3316.621470][T13108] ? shmem_write_begin+0x12a/0x1d0 [ 3316.621491][T13108] generic_perform_write+0x212/0x410 [ 3316.621523][T13108] ? shmem_write_begin+0x1d0/0x1d0 [ 3316.621561][T13108] __generic_file_write_iter+0xa1/0x120 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x9000000}, 0x4008051) [ 3316.621631][T13108] generic_file_write_iter+0x7d/0x1c0 [ 3316.621658][T13108] vfs_write+0x4ab/0x7d0 [ 3316.621692][T13108] ksys_write+0xeb/0x1a0 [ 3316.621796][T13108] __x64_sys_write+0x42/0x50 [ 3316.621823][T13108] do_syscall_64+0x41/0xc0 [ 3316.621853][T13108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3316.621923][T13108] RIP: 0033:0x7ff0343a5ae9 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xa000000}, 0x4008051) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xb000000}, 0x4008051) [ 3316.621939][T13108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3316.621958][T13108] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3316.621976][T13108] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3316.621988][T13108] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3316.622067][T13108] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x10000000}, 0x4008051) 14:58:32 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 74) 14:58:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x6000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x3f000000}, 0x4008051) 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x27d0, 0x1]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/253) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x4) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x27d0, 0x1]) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000000c0)=""/253) (async) [ 3316.622080][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.622094][T13108] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3316.622110][T13108] 14:58:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xc1850000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x40000000}, 0x4008051) 14:58:32 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 75) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x47ee0000}, 0x4008051) [ 3316.862896][T13148] FAULT_INJECTION: forcing a failure. [ 3316.862896][T13148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3316.876176][T13148] CPU: 1 PID: 13148 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3316.876200][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3316.876211][T13148] Call Trace: 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x7ffffff7}, 0x4008051) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfdfdffff, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x97ffffff}, 0x4008051) [ 3316.876216][T13148] [ 3316.876222][T13148] dump_stack_lvl+0xda/0x130 [ 3316.876249][T13148] dump_stack+0x15/0x20 [ 3316.876321][T13148] should_fail_ex+0x21f/0x230 [ 3316.876341][T13148] __should_fail_alloc_page+0xfd/0x110 [ 3316.876364][T13148] __alloc_pages+0x108/0x340 [ 3316.876390][T13148] vma_alloc_folio+0x6a3/0x8c0 [ 3316.876432][T13148] shmem_get_folio_gfp+0x801/0x1200 [ 3316.876465][T13148] shmem_write_begin+0xa6/0x1d0 [ 3316.876541][T13148] generic_perform_write+0x1cf/0x410 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xeffdffff}, 0x4008051) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xf5ffffff}, 0x4008051) [ 3316.876568][T13148] ? shmem_write_begin+0x1d0/0x1d0 [ 3316.876593][T13148] __generic_file_write_iter+0xa1/0x120 [ 3316.876621][T13148] generic_file_write_iter+0x7d/0x1c0 [ 3316.876660][T13148] vfs_write+0x4ab/0x7d0 [ 3316.876763][T13148] ksys_write+0xeb/0x1a0 [ 3316.876794][T13148] __x64_sys_write+0x42/0x50 [ 3316.876870][T13148] do_syscall_64+0x41/0xc0 [ 3316.876891][T13148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3316.876918][T13148] RIP: 0033:0x7ff0343a5ae9 [ 3316.876931][T13148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3316.876953][T13148] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3316.877043][T13148] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3316.877056][T13148] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3316.877075][T13148] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3316.877089][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3316.877103][T13148] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3316.877120][T13148] [ 3316.923515][T13167] FAULT_INJECTION: forcing a failure. [ 3316.923515][T13167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3316.923538][T13167] CPU: 1 PID: 13167 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3316.923558][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3316.923589][T13167] Call Trace: [ 3316.923659][T13167] 14:58:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xf7ffff7f}, 0x4008051) [ 3316.923665][T13167] dump_stack_lvl+0xda/0x130 [ 3316.923692][T13167] dump_stack+0x15/0x20 [ 3317.121824][T13167] should_fail_ex+0x21f/0x230 [ 3317.126559][T13167] should_fail+0xb/0x10 [ 3317.126583][T13167] should_fail_usercopy+0x1a/0x20 [ 3317.126616][T13167] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3317.126647][T13167] ? folio_test_hugetlb+0x3a/0x70 [ 3317.126666][T13167] ? shmem_write_begin+0x12a/0x1d0 [ 3317.126728][T13167] generic_perform_write+0x212/0x410 [ 3317.126755][T13167] ? shmem_write_begin+0x1d0/0x1d0 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffdfd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3317.126777][T13167] __generic_file_write_iter+0xa1/0x120 [ 3317.126806][T13167] generic_file_write_iter+0x7d/0x1c0 [ 3317.173144][T13167] vfs_write+0x4ab/0x7d0 [ 3317.173167][T13167] ksys_write+0xeb/0x1a0 [ 3317.173210][T13167] __x64_sys_write+0x42/0x50 [ 3317.186248][T13167] do_syscall_64+0x41/0xc0 [ 3317.186328][T13167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3317.186356][T13167] RIP: 0033:0x7ff0343a5ae9 [ 3317.186372][T13167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3317.186426][T13167] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3317.186444][T13167] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3317.186457][T13167] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:32 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 76) 14:58:32 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xfe800000}, 0x4008051) 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3317.186550][T13167] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3317.186565][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3317.186580][T13167] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3317.186642][T13167] 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xff010000}, 0x4008051) 14:58:32 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) [ 3317.348590][T13208] FAULT_INJECTION: forcing a failure. [ 3317.348590][T13208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3317.361895][T13208] CPU: 1 PID: 13208 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3317.372525][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3317.382698][T13208] Call Trace: [ 3317.386007][T13208] [ 3317.388961][T13208] dump_stack_lvl+0xda/0x130 [ 3317.388998][T13208] dump_stack+0x15/0x20 14:58:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x6, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xfffffdef}, 0x4008051) 14:58:32 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0x7, 0x5, 0xff, 0x800}, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x2) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0x80) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4aa000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x503a03, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)) [ 3317.389045][T13208] should_fail_ex+0x21f/0x230 [ 3317.389066][T13208] __should_fail_alloc_page+0xfd/0x110 [ 3317.389090][T13208] __alloc_pages+0x108/0x340 [ 3317.389111][T13208] vma_alloc_folio+0x6a3/0x8c0 [ 3317.389158][T13208] shmem_get_folio_gfp+0x801/0x1200 [ 3317.389184][T13208] shmem_write_begin+0xa6/0x1d0 [ 3317.389207][T13208] generic_perform_write+0x1cf/0x410 [ 3317.433286][T13208] ? shmem_write_begin+0x1d0/0x1d0 [ 3317.438494][T13208] __generic_file_write_iter+0xa1/0x120 14:58:33 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 77) 14:58:33 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0x7, 0x5, 0xff, 0x800}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x2) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x2) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0x80) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4aa000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x503a03, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)) (async) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xffffff7f}, 0x4008051) 14:58:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0x7, 0x5, 0xff, 0x800}, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x2) (async) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0x80) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={0xffffffffffffffff}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4aa000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000180)) ioctl$TCSETSW2(r3, 0x5453, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x503a03, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xffffff97}, 0x4008051) [ 3317.444172][T13208] generic_file_write_iter+0x7d/0x1c0 [ 3317.444305][T13208] vfs_write+0x4ab/0x7d0 [ 3317.444334][T13208] ksys_write+0xeb/0x1a0 [ 3317.444398][T13208] __x64_sys_write+0x42/0x50 [ 3317.444432][T13208] do_syscall_64+0x41/0xc0 [ 3317.444458][T13208] entry_SYSCALL_64_after_hwframe+0x63/0xcd 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xfffffff5}, 0x4008051) [ 3317.444492][T13208] RIP: 0033:0x7ff0343a5ae9 [ 3317.444506][T13208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3317.444585][T13208] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3317.444602][T13208] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3317.444614][T13208] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3317.444626][T13208] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3317.444640][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3317.444654][T13208] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3317.444671][T13208] [ 3317.499312][T13236] FAULT_INJECTION: forcing a failure. [ 3317.499312][T13236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3317.586852][T13236] CPU: 1 PID: 13236 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 14:58:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x4000000000000}, 0x4008051) [ 3317.586868][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3317.586876][T13236] Call Trace: [ 3317.586880][T13236] [ 3317.586884][T13236] dump_stack_lvl+0xda/0x130 [ 3317.586911][T13236] dump_stack+0x15/0x20 [ 3317.586923][T13236] should_fail_ex+0x21f/0x230 [ 3317.586935][T13236] should_fail+0xb/0x10 [ 3317.586946][T13236] should_fail_usercopy+0x1a/0x20 [ 3317.586980][T13236] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3317.587012][T13236] ? folio_test_hugetlb+0x3a/0x70 [ 3317.587033][T13236] ? shmem_write_begin+0x12a/0x1d0 [ 3317.652233][T13236] generic_perform_write+0x212/0x410 [ 3317.652257][T13236] ? shmem_write_begin+0x1d0/0x1d0 [ 3317.652271][T13236] __generic_file_write_iter+0xa1/0x120 [ 3317.652287][T13236] generic_file_write_iter+0x7d/0x1c0 [ 3317.652312][T13236] vfs_write+0x4ab/0x7d0 [ 3317.652415][T13236] ksys_write+0xeb/0x1a0 [ 3317.652431][T13236] __x64_sys_write+0x42/0x50 [ 3317.652448][T13236] do_syscall_64+0x41/0xc0 [ 3317.652506][T13236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3317.652524][T13236] RIP: 0033:0x7ff0343a5ae9 [ 3317.652533][T13236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3317.652562][T13236] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3317.652574][T13236] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:33 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 78) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x10000000000000}, 0x4008051) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x600, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x4, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48280, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x80000000000000}, 0x4008051) [ 3317.652605][T13236] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3317.652612][T13236] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3317.652697][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3317.652755][T13236] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3317.652827][T13236] 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x100000000000000}, 0x4008051) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2b86, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x200000000000000}, 0x4008051) [ 3317.821500][T13265] FAULT_INJECTION: forcing a failure. [ 3317.821500][T13265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3317.834775][T13265] CPU: 1 PID: 13265 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3317.834797][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3317.834807][T13265] Call Trace: [ 3317.834837][T13265] [ 3317.834842][T13265] dump_stack_lvl+0xda/0x130 [ 3317.834869][T13265] dump_stack+0x15/0x20 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x300000000000000}, 0x4008051) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x862b, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3317.870690][T13265] should_fail_ex+0x21f/0x230 [ 3317.875406][T13265] __should_fail_alloc_page+0xfd/0x110 [ 3317.880889][T13265] __alloc_pages+0x108/0x340 [ 3317.880917][T13265] vma_alloc_folio+0x6a3/0x8c0 [ 3317.880946][T13265] shmem_get_folio_gfp+0x801/0x1200 [ 3317.881049][T13265] shmem_write_begin+0xa6/0x1d0 [ 3317.881070][T13265] generic_perform_write+0x1cf/0x410 [ 3317.881097][T13265] ? shmem_write_begin+0x1d0/0x1d0 [ 3317.881123][T13265] __generic_file_write_iter+0xa1/0x120 [ 3317.881153][T13265] generic_file_write_iter+0x7d/0x1c0 14:58:33 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 79) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x400000000000000}, 0x4008051) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3317.922051][T13265] vfs_write+0x4ab/0x7d0 [ 3317.926507][T13265] ksys_write+0xeb/0x1a0 [ 3317.930879][T13265] __x64_sys_write+0x42/0x50 [ 3317.935532][T13265] do_syscall_64+0x41/0xc0 [ 3317.939966][T13265] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3317.940003][T13265] RIP: 0033:0x7ff0343a5ae9 14:58:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x6, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x500000000000000}, 0x4008051) [ 3317.940018][T13265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3317.940047][T13265] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3317.940095][T13265] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3317.940110][T13265] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3317.940170][T13265] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:33 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x600000000000000}, 0x4008051) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x7b, 0x16, &(0x7f0000000040)}) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3317.940234][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3317.940247][T13265] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3317.940266][T13265] [ 3317.984606][T13292] FAULT_INJECTION: forcing a failure. [ 3317.984606][T13292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3318.050629][T13292] CPU: 1 PID: 13292 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3318.050720][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3318.071502][T13292] Call Trace: [ 3318.071510][T13292] [ 3318.071557][T13292] dump_stack_lvl+0xda/0x130 [ 3318.071589][T13292] dump_stack+0x15/0x20 [ 3318.071691][T13292] should_fail_ex+0x21f/0x230 [ 3318.071721][T13292] should_fail+0xb/0x10 [ 3318.071739][T13292] should_fail_usercopy+0x1a/0x20 [ 3318.071768][T13292] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3318.071815][T13292] ? folio_test_hugetlb+0x3a/0x70 [ 3318.071832][T13292] ? shmem_write_begin+0x12a/0x1d0 [ 3318.071862][T13292] generic_perform_write+0x212/0x410 [ 3318.071890][T13292] ? shmem_write_begin+0x1d0/0x1d0 [ 3318.071923][T13292] __generic_file_write_iter+0xa1/0x120 [ 3318.071952][T13292] generic_file_write_iter+0x7d/0x1c0 [ 3318.071982][T13292] vfs_write+0x4ab/0x7d0 [ 3318.072013][T13292] ksys_write+0xeb/0x1a0 [ 3318.072129][T13292] __x64_sys_write+0x42/0x50 [ 3318.072159][T13292] do_syscall_64+0x41/0xc0 [ 3318.072186][T13292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.072221][T13292] RIP: 0033:0x7ff0343a5ae9 [ 3318.072237][T13292] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3318.072287][T13292] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3318.072308][T13292] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3318.072324][T13292] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:33 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 80) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x700000000000000}, 0x4008051) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x7b, 0x16, &(0x7f0000000040)}) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x800000000000000}, 0x4008051) 14:58:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be28d197df"}) 14:58:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3318.072339][T13292] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3318.072352][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3318.072366][T13292] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3318.072384][T13292] 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x900000000000000}, 0x4008051) 14:58:33 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000440)={0x7b, 0x16, &(0x7f0000000040)}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:33 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 81) [ 3318.280501][T13318] FAULT_INJECTION: forcing a failure. [ 3318.280501][T13318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3318.294016][T13318] CPU: 1 PID: 13318 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3318.294043][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3318.294056][T13318] Call Trace: 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xa00000000000000}, 0x4008051) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xb00000000000000}, 0x4008051) [ 3318.294063][T13318] [ 3318.294071][T13318] dump_stack_lvl+0xda/0x130 [ 3318.294175][T13318] dump_stack+0x15/0x20 [ 3318.294201][T13318] should_fail_ex+0x21f/0x230 [ 3318.294225][T13318] __should_fail_alloc_page+0xfd/0x110 [ 3318.294249][T13318] __alloc_pages+0x108/0x340 [ 3318.294270][T13318] vma_alloc_folio+0x6a3/0x8c0 [ 3318.294363][T13318] shmem_get_folio_gfp+0x801/0x1200 [ 3318.294389][T13318] shmem_write_begin+0xa6/0x1d0 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x1000000000000000}, 0x4008051) 14:58:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x3f00000000000000}, 0x4008051) [ 3318.294409][T13318] generic_perform_write+0x1cf/0x410 [ 3318.294436][T13318] ? shmem_write_begin+0x1d0/0x1d0 [ 3318.294581][T13318] __generic_file_write_iter+0xa1/0x120 [ 3318.294612][T13318] generic_file_write_iter+0x7d/0x1c0 [ 3318.294710][T13318] vfs_write+0x4ab/0x7d0 [ 3318.294743][T13318] ksys_write+0xeb/0x1a0 [ 3318.294773][T13318] __x64_sys_write+0x42/0x50 [ 3318.294810][T13318] do_syscall_64+0x41/0xc0 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x4000000000000000}, 0x4008051) [ 3318.294878][T13318] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.294912][T13318] RIP: 0033:0x7ff0343a5ae9 [ 3318.294928][T13318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3318.294950][T13318] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3318.294972][T13318] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x47ee000000000000}, 0x4008051) [ 3318.295051][T13318] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3318.295065][T13318] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3318.295076][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3318.295089][T13318] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3318.295107][T13318] [ 3318.328759][T13330] FAULT_INJECTION: forcing a failure. [ 3318.328759][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3318.328786][T13330] CPU: 1 PID: 13330 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3318.328838][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3318.328856][T13330] Call Trace: [ 3318.328862][T13330] [ 3318.328869][T13330] dump_stack_lvl+0xda/0x130 [ 3318.328901][T13330] dump_stack+0x15/0x20 [ 3318.328993][T13330] should_fail_ex+0x21f/0x230 [ 3318.329014][T13330] should_fail+0xb/0x10 [ 3318.329073][T13330] should_fail_usercopy+0x1a/0x20 [ 3318.329180][T13330] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3318.329282][T13330] ? folio_test_hugetlb+0x3a/0x70 [ 3318.329369][T13330] ? shmem_write_begin+0x12a/0x1d0 [ 3318.329390][T13330] generic_perform_write+0x212/0x410 [ 3318.329424][T13330] ? shmem_write_begin+0x1d0/0x1d0 [ 3318.329447][T13330] __generic_file_write_iter+0xa1/0x120 [ 3318.329473][T13330] generic_file_write_iter+0x7d/0x1c0 [ 3318.329511][T13330] vfs_write+0x4ab/0x7d0 [ 3318.329539][T13330] ksys_write+0xeb/0x1a0 [ 3318.329566][T13330] __x64_sys_write+0x42/0x50 [ 3318.329628][T13330] do_syscall_64+0x41/0xc0 [ 3318.329651][T13330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.329684][T13330] RIP: 0033:0x7ff0343a5ae9 [ 3318.329701][T13330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x4000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430342, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x97ffffff00000000}, 0x4008051) 14:58:34 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 82) [ 3318.329779][T13330] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3318.329863][T13330] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3318.329874][T13330] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3318.329885][T13330] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3318.329896][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3318.329962][T13330] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3318.329980][T13330] 14:58:34 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430342, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430342, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xeffdffff00000000}, 0x4008051) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xf5ffffff00000000}, 0x4008051) 14:58:34 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430342, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x430342, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) [ 3318.753483][T13352] FAULT_INJECTION: forcing a failure. [ 3318.753483][T13352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3318.766799][T13352] CPU: 1 PID: 13352 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3318.777280][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3318.788621][T13352] Call Trace: [ 3318.788630][T13352] 14:58:34 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 83) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xf7ffff7f00000000}, 0x4008051) [ 3318.788638][T13352] dump_stack_lvl+0xda/0x130 [ 3318.788668][T13352] dump_stack+0x15/0x20 [ 3318.788748][T13352] should_fail_ex+0x21f/0x230 [ 3318.788833][T13352] __should_fail_alloc_page+0xfd/0x110 [ 3318.788855][T13352] __alloc_pages+0x108/0x340 [ 3318.788883][T13352] vma_alloc_folio+0x6a3/0x8c0 [ 3318.788915][T13352] shmem_get_folio_gfp+0x801/0x1200 [ 3318.788942][T13352] shmem_write_begin+0xa6/0x1d0 [ 3318.788963][T13352] generic_perform_write+0x1cf/0x410 [ 3318.788989][T13352] ? shmem_write_begin+0x1d0/0x1d0 [ 3318.789168][T13352] __generic_file_write_iter+0xa1/0x120 [ 3318.789269][T13352] generic_file_write_iter+0x7d/0x1c0 [ 3318.789299][T13352] vfs_write+0x4ab/0x7d0 [ 3318.789407][T13352] ksys_write+0xeb/0x1a0 [ 3318.789439][T13352] __x64_sys_write+0x42/0x50 [ 3318.789503][T13352] do_syscall_64+0x41/0xc0 [ 3318.789598][T13352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.789627][T13352] RIP: 0033:0x7ff0343a5ae9 [ 3318.789640][T13352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3318.789656][T13352] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3318.789677][T13352] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3318.789689][T13352] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3318.789730][T13352] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3318.789741][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3318.789753][T13352] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3318.789820][T13352] [ 3318.820879][T13369] FAULT_INJECTION: forcing a failure. [ 3318.820879][T13369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3318.820907][T13369] CPU: 1 PID: 13369 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3318.821018][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3318.821031][T13369] Call Trace: [ 3318.821037][T13369] [ 3318.821044][T13369] dump_stack_lvl+0xda/0x130 [ 3318.821122][T13369] dump_stack+0x15/0x20 [ 3318.821147][T13369] should_fail_ex+0x21f/0x230 [ 3318.821249][T13369] should_fail+0xb/0x10 [ 3318.821297][T13369] should_fail_usercopy+0x1a/0x20 [ 3318.821319][T13369] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3318.821352][T13369] ? folio_test_hugetlb+0x3a/0x70 [ 3318.821456][T13369] ? shmem_write_begin+0x12a/0x1d0 [ 3318.821481][T13369] generic_perform_write+0x212/0x410 [ 3318.821600][T13369] ? shmem_write_begin+0x1d0/0x1d0 [ 3318.821626][T13369] __generic_file_write_iter+0xa1/0x120 [ 3318.821723][T13369] generic_file_write_iter+0x7d/0x1c0 [ 3318.821767][T13369] vfs_write+0x4ab/0x7d0 [ 3318.821794][T13369] ksys_write+0xeb/0x1a0 [ 3318.821823][T13369] __x64_sys_write+0x42/0x50 [ 3318.821927][T13369] do_syscall_64+0x41/0xc0 [ 3318.821951][T13369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3318.821977][T13369] RIP: 0033:0x7ff0343a5ae9 [ 3318.821990][T13369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3318.822034][T13369] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3318.822051][T13369] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2}) 14:58:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46041, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x6000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xfe80000000000000}, 0x4008051) 14:58:34 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 84) [ 3318.822062][T13369] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3318.822074][T13369] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3318.822087][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3318.822098][T13369] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3318.822169][T13369] 14:58:34 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46041, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46041, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xff01000000000000}, 0x4008051) 14:58:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) [ 3319.209260][T13380] FAULT_INJECTION: forcing a failure. [ 3319.209260][T13380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3319.222626][T13380] CPU: 1 PID: 13380 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3319.233050][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3319.233063][T13380] Call Trace: [ 3319.233099][T13380] [ 3319.233106][T13380] dump_stack_lvl+0xda/0x130 [ 3319.254016][T13380] dump_stack+0x15/0x20 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xffffff7f00000000}, 0x4008051) 14:58:34 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 85) 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0xffffffff00000000}, 0x4008051) [ 3319.258195][T13380] should_fail_ex+0x21f/0x230 [ 3319.258224][T13380] __should_fail_alloc_page+0xfd/0x110 [ 3319.258357][T13380] __alloc_pages+0x108/0x340 [ 3319.258385][T13380] vma_alloc_folio+0x6a3/0x8c0 [ 3319.258416][T13380] shmem_get_folio_gfp+0x801/0x1200 [ 3319.258449][T13380] shmem_write_begin+0xa6/0x1d0 [ 3319.258532][T13380] generic_perform_write+0x1cf/0x410 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x2}, 0x4008051) [ 3319.258564][T13380] ? shmem_write_begin+0x1d0/0x1d0 [ 3319.258589][T13380] __generic_file_write_iter+0xa1/0x120 [ 3319.258623][T13380] generic_file_write_iter+0x7d/0x1c0 [ 3319.258650][T13380] vfs_write+0x4ab/0x7d0 [ 3319.258689][T13380] ksys_write+0xeb/0x1a0 [ 3319.258729][T13380] __x64_sys_write+0x42/0x50 [ 3319.258813][T13380] do_syscall_64+0x41/0xc0 [ 3319.258840][T13380] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.258874][T13380] RIP: 0033:0x7ff0343a5ae9 14:58:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x3}, 0x4008051) [ 3319.258958][T13380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3319.259061][T13380] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3319.259084][T13380] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3319.259100][T13380] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3319.259114][T13380] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3319.259191][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3319.259282][T13380] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3319.259301][T13380] [ 3319.294498][T13396] FAULT_INJECTION: forcing a failure. [ 3319.294498][T13396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3319.294562][T13396] CPU: 0 PID: 13396 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3319.294585][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3319.294597][T13396] Call Trace: [ 3319.294601][T13396] [ 3319.294607][T13396] dump_stack_lvl+0xda/0x130 [ 3319.294712][T13396] dump_stack+0x15/0x20 [ 3319.294802][T13396] should_fail_ex+0x21f/0x230 [ 3319.294825][T13396] should_fail+0xb/0x10 [ 3319.294844][T13396] should_fail_usercopy+0x1a/0x20 [ 3319.294868][T13396] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3319.294901][T13396] ? folio_test_hugetlb+0x3a/0x70 [ 3319.294953][T13396] ? shmem_write_begin+0x12a/0x1d0 [ 3319.294974][T13396] generic_perform_write+0x212/0x410 [ 3319.295000][T13396] ? shmem_write_begin+0x1d0/0x1d0 [ 3319.295036][T13396] __generic_file_write_iter+0xa1/0x120 [ 3319.295067][T13396] generic_file_write_iter+0x7d/0x1c0 [ 3319.295096][T13396] vfs_write+0x4ab/0x7d0 [ 3319.295123][T13396] ksys_write+0xeb/0x1a0 [ 3319.295213][T13396] __x64_sys_write+0x42/0x50 [ 3319.295241][T13396] do_syscall_64+0x41/0xc0 [ 3319.295263][T13396] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.295353][T13396] RIP: 0033:0x7ff0343a5ae9 [ 3319.295366][T13396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3319.295383][T13396] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3319.295400][T13396] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 14:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2b860000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x4}, 0x4008051) 14:58:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 86) [ 3319.295484][T13396] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3319.295499][T13396] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3319.295513][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3319.295527][T13396] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3319.295545][T13396] 14:58:35 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46041, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46041, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) 14:58:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x7, 0x0, 0x3f, 0xffff, 0x0, "c7555f434986ed932908ff8586e60cc663f287"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5}, 0x4008051) [ 3319.665368][T13408] FAULT_INJECTION: forcing a failure. [ 3319.665368][T13408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3319.678721][T13408] CPU: 1 PID: 13408 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3319.689146][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3319.699206][T13408] Call Trace: [ 3319.702492][T13408] [ 3319.705448][T13408] dump_stack_lvl+0xda/0x130 [ 3319.710061][T13408] dump_stack+0x15/0x20 14:58:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x7, 0x0, 0x3f, 0xffff, 0x0, "c7555f434986ed932908ff8586e60cc663f287"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x6}, 0x4008051) 14:58:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 87) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x7}, 0x4008051) [ 3319.714360][T13408] should_fail_ex+0x21f/0x230 [ 3319.719112][T13408] __should_fail_alloc_page+0xfd/0x110 [ 3319.724669][T13408] __alloc_pages+0x108/0x340 [ 3319.724720][T13408] vma_alloc_folio+0x6a3/0x8c0 [ 3319.724746][T13408] shmem_get_folio_gfp+0x801/0x1200 [ 3319.724835][T13408] shmem_write_begin+0xa6/0x1d0 [ 3319.724857][T13408] generic_perform_write+0x1cf/0x410 [ 3319.724953][T13408] ? shmem_write_begin+0x1d0/0x1d0 [ 3319.725035][T13408] __generic_file_write_iter+0xa1/0x120 [ 3319.725108][T13408] generic_file_write_iter+0x7d/0x1c0 [ 3319.725135][T13408] vfs_write+0x4ab/0x7d0 [ 3319.725166][T13408] ksys_write+0xeb/0x1a0 [ 3319.725266][T13408] __x64_sys_write+0x42/0x50 [ 3319.725293][T13408] do_syscall_64+0x41/0xc0 [ 3319.725314][T13408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.725418][T13408] RIP: 0033:0x7ff0343a5ae9 14:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xfdfdffff, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x8}, 0x4008051) 14:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x6}) 14:58:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x7, 0x0, 0x3f, 0xffff, 0x0, "c7555f434986ed932908ff8586e60cc663f287"}) (async, rerun: 32) ioctl$TCSETSW2(r0, 0x5453, 0x0) (rerun: 32) [ 3319.725434][T13408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3319.725455][T13408] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3319.725472][T13408] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3319.725485][T13408] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3319.725500][T13408] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x9}, 0x4008051) [ 3319.725513][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3319.725528][T13408] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3319.725563][T13408] [ 3319.786031][T13433] FAULT_INJECTION: forcing a failure. [ 3319.786031][T13433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3319.891903][T13433] CPU: 0 PID: 13433 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3319.891921][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3319.891929][T13433] Call Trace: 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xa}, 0x4008051) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xb}, 0x4008051) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x10}, 0x4008051) [ 3319.891934][T13433] [ 3319.891939][T13433] dump_stack_lvl+0xda/0x130 [ 3319.891959][T13433] dump_stack+0x15/0x20 [ 3319.892028][T13433] should_fail_ex+0x21f/0x230 [ 3319.892042][T13433] should_fail+0xb/0x10 [ 3319.892053][T13433] should_fail_usercopy+0x1a/0x20 [ 3319.892066][T13433] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3319.892125][T13433] ? folio_test_hugetlb+0x3a/0x70 [ 3319.952460][T13433] ? shmem_write_begin+0x12a/0x1d0 [ 3319.952487][T13433] generic_perform_write+0x212/0x410 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x300}, 0x4008051) [ 3319.952524][T13433] ? shmem_write_begin+0x1d0/0x1d0 [ 3319.952547][T13433] __generic_file_write_iter+0xa1/0x120 [ 3319.952576][T13433] generic_file_write_iter+0x7d/0x1c0 [ 3319.952655][T13433] vfs_write+0x4ab/0x7d0 [ 3319.952684][T13433] ksys_write+0xeb/0x1a0 [ 3319.952795][T13433] __x64_sys_write+0x42/0x50 [ 3319.952825][T13433] do_syscall_64+0x41/0xc0 [ 3319.952858][T13433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.952886][T13433] RIP: 0033:0x7ff0343a5ae9 [ 3319.952966][T13433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3319.952987][T13433] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3319.953008][T13433] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3319.953022][T13433] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 88) 14:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x300}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x500}, 0x4008051) 14:58:35 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xfffffdfd, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = syz_open_pts(r0, 0x400000) ioctl$TCFLSH(r1, 0x540b, 0x0) [ 3319.953036][T13433] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3319.953048][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3319.953061][T13433] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3319.953148][T13433] 14:58:35 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x600}, 0x4008051) 14:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x600}) 14:58:35 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = syz_open_pts(r0, 0x400000) ioctl$TCFLSH(r1, 0x540b, 0x0) 14:58:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 89) 14:58:35 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x700}, 0x4008051) 14:58:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x85c1}) 14:58:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3320.175688][T13473] FAULT_INJECTION: forcing a failure. [ 3320.175688][T13473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3320.189217][T13473] CPU: 1 PID: 13473 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x900}, 0x4008051) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xa00}, 0x4008051) [ 3320.189275][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3320.189334][T13473] Call Trace: [ 3320.189340][T13473] [ 3320.189348][T13473] dump_stack_lvl+0xda/0x130 [ 3320.189421][T13473] dump_stack+0x15/0x20 [ 3320.189441][T13473] should_fail_ex+0x21f/0x230 [ 3320.189463][T13473] __should_fail_alloc_page+0xfd/0x110 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xb00}, 0x4008051) 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x3f00}, 0x4008051) [ 3320.189490][T13473] __alloc_pages+0x108/0x340 [ 3320.189516][T13473] vma_alloc_folio+0x6a3/0x8c0 [ 3320.189604][T13473] shmem_get_folio_gfp+0x801/0x1200 [ 3320.189640][T13473] shmem_write_begin+0xa6/0x1d0 [ 3320.189660][T13473] generic_perform_write+0x1cf/0x410 [ 3320.189686][T13473] ? shmem_write_begin+0x1d0/0x1d0 14:58:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x4000}, 0x4008051) [ 3320.189709][T13473] __generic_file_write_iter+0xa1/0x120 [ 3320.189736][T13473] generic_file_write_iter+0x7d/0x1c0 [ 3320.189839][T13473] vfs_write+0x4ab/0x7d0 [ 3320.189865][T13473] ksys_write+0xeb/0x1a0 [ 3320.189961][T13473] __x64_sys_write+0x42/0x50 [ 3320.189988][T13473] do_syscall_64+0x41/0xc0 [ 3320.190011][T13473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.190045][T13473] RIP: 0033:0x7ff0343a5ae9 [ 3320.190065][T13473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3320.190167][T13473] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3320.190187][T13473] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3320.190207][T13473] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3320.190222][T13473] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3320.190235][T13473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.190249][T13473] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3320.190267][T13473] [ 3320.239134][T13491] FAULT_INJECTION: forcing a failure. [ 3320.239134][T13491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.239160][T13491] CPU: 1 PID: 13491 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3320.239184][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3320.239194][T13491] Call Trace: [ 3320.239199][T13491] [ 3320.239228][T13491] dump_stack_lvl+0xda/0x130 [ 3320.239287][T13491] dump_stack+0x15/0x20 [ 3320.239310][T13491] should_fail_ex+0x21f/0x230 [ 3320.239399][T13491] should_fail+0xb/0x10 [ 3320.239414][T13491] should_fail_usercopy+0x1a/0x20 [ 3320.239439][T13491] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3320.239467][T13491] ? folio_test_hugetlb+0x3a/0x70 [ 3320.239566][T13491] ? shmem_write_begin+0x12a/0x1d0 [ 3320.239654][T13491] generic_perform_write+0x212/0x410 [ 3320.239723][T13491] ? shmem_write_begin+0x1d0/0x1d0 [ 3320.239840][T13491] __generic_file_write_iter+0xa1/0x120 [ 3320.239870][T13491] generic_file_write_iter+0x7d/0x1c0 [ 3320.239900][T13491] vfs_write+0x4ab/0x7d0 [ 3320.239940][T13491] ksys_write+0xeb/0x1a0 [ 3320.239969][T13491] __x64_sys_write+0x42/0x50 [ 3320.239995][T13491] do_syscall_64+0x41/0xc0 [ 3320.240101][T13491] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.240135][T13491] RIP: 0033:0x7ff0343a5ae9 [ 3320.240150][T13491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3320.240168][T13491] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3320.240186][T13491] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3320.240257][T13491] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3320.240272][T13491] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 14:58:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = syz_open_pts(r0, 0x400000) ioctl$TCFLSH(r1, 0x540b, 0x0) 14:58:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x47ee}, 0x4008051) 14:58:36 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 90) 14:58:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xc185}) 14:58:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3320.240286][T13491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.240300][T13491] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3320.240348][T13491] [ 3320.667199][T13509] FAULT_INJECTION: forcing a failure. [ 3320.667199][T13509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x80fe}, 0x4008051) 14:58:36 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 91) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xee47}, 0x4008051) [ 3320.680517][T13509] CPU: 1 PID: 13509 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3320.680591][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3320.680604][T13509] Call Trace: [ 3320.680610][T13509] [ 3320.680617][T13509] dump_stack_lvl+0xda/0x130 [ 3320.680714][T13509] dump_stack+0x15/0x20 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xfe80}, 0x4008051) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xff01}, 0x4008051) [ 3320.680811][T13509] should_fail_ex+0x21f/0x230 [ 3320.680830][T13509] __should_fail_alloc_page+0xfd/0x110 [ 3320.680855][T13509] __alloc_pages+0x108/0x340 [ 3320.680882][T13509] vma_alloc_folio+0x6a3/0x8c0 [ 3320.680907][T13509] ? _raw_spin_unlock+0x26/0x40 [ 3320.680934][T13509] shmem_get_folio_gfp+0x801/0x1200 [ 3320.680964][T13509] shmem_write_begin+0xa6/0x1d0 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x40000}, 0x4008051) [ 3320.680987][T13509] generic_perform_write+0x1cf/0x410 [ 3320.681055][T13509] ? shmem_write_begin+0x1d0/0x1d0 [ 3320.681075][T13509] __generic_file_write_iter+0xa1/0x120 [ 3320.681102][T13509] generic_file_write_iter+0x7d/0x1c0 [ 3320.681158][T13509] vfs_write+0x4ab/0x7d0 [ 3320.681239][T13509] ksys_write+0xeb/0x1a0 [ 3320.681268][T13509] __x64_sys_write+0x42/0x50 [ 3320.681293][T13509] do_syscall_64+0x41/0xc0 [ 3320.681315][T13509] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.681418][T13509] RIP: 0033:0x7ff0343a5ae9 [ 3320.681431][T13509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3320.681513][T13509] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3320.681604][T13509] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3320.681616][T13509] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3320.681627][T13509] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3320.681641][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.681655][T13509] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3320.681672][T13509] [ 3320.718425][T13523] FAULT_INJECTION: forcing a failure. [ 3320.718425][T13523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.718450][T13523] CPU: 1 PID: 13523 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3320.718511][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3320.718522][T13523] Call Trace: [ 3320.718527][T13523] [ 3320.718533][T13523] dump_stack_lvl+0xda/0x130 [ 3320.718558][T13523] dump_stack+0x15/0x20 [ 3320.718582][T13523] should_fail_ex+0x21f/0x230 [ 3320.718639][T13523] should_fail+0xb/0x10 [ 3320.718659][T13523] should_fail_usercopy+0x1a/0x20 [ 3320.718689][T13523] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3320.718718][T13523] ? folio_test_hugetlb+0x3a/0x70 [ 3320.718739][T13523] ? shmem_write_begin+0x12a/0x1d0 [ 3320.718782][T13523] generic_perform_write+0x212/0x410 [ 3320.718811][T13523] ? shmem_write_begin+0x1d0/0x1d0 [ 3320.718834][T13523] __generic_file_write_iter+0xa1/0x120 [ 3320.718865][T13523] generic_file_write_iter+0x7d/0x1c0 [ 3320.719041][T13523] vfs_write+0x4ab/0x7d0 [ 3320.719070][T13523] ksys_write+0xeb/0x1a0 [ 3320.719096][T13523] __x64_sys_write+0x42/0x50 [ 3320.719121][T13523] do_syscall_64+0x41/0xc0 [ 3320.719202][T13523] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3320.719231][T13523] RIP: 0033:0x7ff0343a5ae9 [ 3320.719243][T13523] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3320.719266][T13523] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x100000}, 0x4008051) 14:58:36 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 92) 14:58:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x1000000}) 14:58:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x4, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3320.719283][T13523] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3320.719297][T13523] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3320.719331][T13523] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3320.719342][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.719353][T13523] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3320.719369][T13523] [ 3321.150668][T13538] FAULT_INJECTION: forcing a failure. [ 3321.150668][T13538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3321.164064][T13538] CPU: 0 PID: 13538 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3321.164088][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3321.184588][T13538] Call Trace: [ 3321.184596][T13538] [ 3321.184604][T13538] dump_stack_lvl+0xda/0x130 [ 3321.195386][T13538] dump_stack+0x15/0x20 14:58:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x800000}, 0x4008051) 14:58:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x6, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2000000}) [ 3321.199652][T13538] should_fail_ex+0x21f/0x230 [ 3321.204358][T13538] __should_fail_alloc_page+0xfd/0x110 [ 3321.209915][T13538] __alloc_pages+0x108/0x340 [ 3321.209947][T13538] vma_alloc_folio+0x6a3/0x8c0 [ 3321.219313][T13538] shmem_get_folio_gfp+0x801/0x1200 [ 3321.219350][T13538] shmem_write_begin+0xa6/0x1d0 [ 3321.219442][T13538] generic_perform_write+0x1cf/0x410 [ 3321.219471][T13538] ? shmem_write_begin+0x1d0/0x1d0 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x1000000}, 0x4008051) 14:58:36 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 93) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x2000000}, 0x4008051) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x3000000}, 0x4008051) [ 3321.219574][T13538] __generic_file_write_iter+0xa1/0x120 [ 3321.219638][T13538] generic_file_write_iter+0x7d/0x1c0 [ 3321.219669][T13538] vfs_write+0x4ab/0x7d0 [ 3321.219745][T13538] ksys_write+0xeb/0x1a0 [ 3321.219777][T13538] __x64_sys_write+0x42/0x50 [ 3321.219810][T13538] do_syscall_64+0x41/0xc0 [ 3321.219837][T13538] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.219916][T13538] RIP: 0033:0x7ff0343a5ae9 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x4000000}, 0x4008051) 14:58:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x5000000}, 0x4008051) [ 3321.219932][T13538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3321.220024][T13538] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3321.220047][T13538] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3321.220060][T13538] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3321.220073][T13538] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3321.220085][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3321.220097][T13538] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3321.220123][T13538] [ 3321.288394][T13562] FAULT_INJECTION: forcing a failure. [ 3321.288394][T13562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3321.288420][T13562] CPU: 0 PID: 13562 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3321.288454][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3321.288480][T13562] Call Trace: [ 3321.288486][T13562] [ 3321.288493][T13562] dump_stack_lvl+0xda/0x130 [ 3321.288526][T13562] dump_stack+0x15/0x20 [ 3321.288546][T13562] should_fail_ex+0x21f/0x230 [ 3321.288566][T13562] should_fail+0xb/0x10 [ 3321.288603][T13562] should_fail_usercopy+0x1a/0x20 [ 3321.288624][T13562] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3321.288654][T13562] ? folio_test_hugetlb+0x3a/0x70 [ 3321.288674][T13562] ? shmem_write_begin+0x12a/0x1d0 [ 3321.288754][T13562] generic_perform_write+0x212/0x410 [ 3321.288800][T13562] ? shmem_write_begin+0x1d0/0x1d0 [ 3321.288824][T13562] __generic_file_write_iter+0xa1/0x120 [ 3321.288853][T13562] generic_file_write_iter+0x7d/0x1c0 [ 3321.288887][T13562] vfs_write+0x4ab/0x7d0 [ 3321.288928][T13562] ksys_write+0xeb/0x1a0 [ 3321.288991][T13562] __x64_sys_write+0x42/0x50 [ 3321.289021][T13562] do_syscall_64+0x41/0xc0 [ 3321.289047][T13562] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.289150][T13562] RIP: 0033:0x7ff0343a5ae9 [ 3321.289166][T13562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3321.289188][T13562] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x300, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3000000}) 14:58:37 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x6000000}, 0x4008051) 14:58:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:37 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 94) [ 3321.289210][T13562] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3321.289225][T13562] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3321.289239][T13562] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3321.289314][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3321.289347][T13562] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3321.289364][T13562] 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x7000000}, 0x4008051) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x8000000}, 0x4008051) 14:58:37 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 95) [ 3321.612372][T13576] FAULT_INJECTION: forcing a failure. [ 3321.612372][T13576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3321.625804][T13576] CPU: 1 PID: 13576 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3321.636361][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3321.636410][T13576] Call Trace: [ 3321.636416][T13576] [ 3321.636423][T13576] dump_stack_lvl+0xda/0x130 14:58:37 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x9000000}, 0x4008051) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xa000000}, 0x4008051) [ 3321.636455][T13576] dump_stack+0x15/0x20 [ 3321.636606][T13576] should_fail_ex+0x21f/0x230 [ 3321.636627][T13576] __should_fail_alloc_page+0xfd/0x110 [ 3321.636650][T13576] __alloc_pages+0x108/0x340 [ 3321.636673][T13576] vma_alloc_folio+0x6a3/0x8c0 [ 3321.636699][T13576] shmem_get_folio_gfp+0x801/0x1200 [ 3321.636755][T13576] shmem_write_begin+0xa6/0x1d0 [ 3321.636780][T13576] generic_perform_write+0x1cf/0x410 [ 3321.636811][T13576] ? shmem_write_begin+0x1d0/0x1d0 [ 3321.636834][T13576] __generic_file_write_iter+0xa1/0x120 [ 3321.636870][T13576] generic_file_write_iter+0x7d/0x1c0 [ 3321.636895][T13576] vfs_write+0x4ab/0x7d0 [ 3321.636926][T13576] ksys_write+0xeb/0x1a0 [ 3321.636965][T13576] __x64_sys_write+0x42/0x50 [ 3321.637051][T13576] do_syscall_64+0x41/0xc0 [ 3321.637073][T13576] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.637101][T13576] RIP: 0033:0x7ff0343a5ae9 [ 3321.637118][T13576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3321.637146][T13576] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3321.637168][T13576] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3321.637183][T13576] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3321.637197][T13576] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3321.637211][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x600, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xb000000}, 0x4008051) [ 3321.637225][T13576] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3321.637241][T13576] [ 3321.668338][T13590] FAULT_INJECTION: forcing a failure. [ 3321.668338][T13590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3321.835793][T13590] CPU: 1 PID: 13590 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3321.846241][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3321.846257][T13590] Call Trace: [ 3321.846265][T13590] [ 3321.862616][T13590] dump_stack_lvl+0xda/0x130 [ 3321.867228][T13590] dump_stack+0x15/0x20 [ 3321.871446][T13590] should_fail_ex+0x21f/0x230 [ 3321.876222][T13590] should_fail+0xb/0x10 [ 3321.880418][T13590] should_fail_usercopy+0x1a/0x20 [ 3321.885446][T13590] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3321.891183][T13590] ? folio_test_hugetlb+0x3a/0x70 [ 3321.896332][T13590] ? shmem_write_begin+0x12a/0x1d0 [ 3321.896362][T13590] generic_perform_write+0x212/0x410 [ 3321.896394][T13590] ? shmem_write_begin+0x1d0/0x1d0 [ 3321.896419][T13590] __generic_file_write_iter+0xa1/0x120 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4000000}) 14:58:37 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x10000000}, 0x4008051) [ 3321.896462][T13590] generic_file_write_iter+0x7d/0x1c0 [ 3321.896489][T13590] vfs_write+0x4ab/0x7d0 [ 3321.896520][T13590] ksys_write+0xeb/0x1a0 [ 3321.931296][T13590] __x64_sys_write+0x42/0x50 [ 3321.936427][T13590] do_syscall_64+0x41/0xc0 [ 3321.940861][T13590] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3321.946785][T13590] RIP: 0033:0x7ff0343a5ae9 14:58:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x7b3c2798654b8024, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/164) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000200)) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)=""/18) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x0, 0x2, 0xa1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x7, 0x7f, "bb2d8b454fbdd0f27cb67b74d0889dbc6570e5", 0x5, 0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/75) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x186}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/full\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x3f000000}, 0x4008051) [ 3321.951277][T13590] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3321.970892][T13590] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3321.979422][T13590] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3321.979439][T13590] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x40000000}, 0x4008051) [ 3321.979454][T13590] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3321.979469][T13590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3321.979535][T13590] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3321.979570][T13590] 14:58:37 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 96) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x47ee0000}, 0x4008051) 14:58:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2b86, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x6000000}) 14:58:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x7b3c2798654b8024, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/164) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000200)) (async) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)=""/18) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x0, 0x2, 0xa1}}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x7, 0x7f, "bb2d8b454fbdd0f27cb67b74d0889dbc6570e5", 0x5, 0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/75) (async) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x186}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/full\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 14:58:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x7ffffff7}, 0x4008051) 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xc1850000}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x97ffffff}, 0x4008051) 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x862b, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3322.167772][T13634] FAULT_INJECTION: forcing a failure. [ 3322.167772][T13634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3322.181231][T13634] CPU: 1 PID: 13634 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3322.191730][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3322.201788][T13634] Call Trace: [ 3322.201796][T13634] [ 3322.201803][T13634] dump_stack_lvl+0xda/0x130 [ 3322.201834][T13634] dump_stack+0x15/0x20 14:58:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) [ 3322.201889][T13634] should_fail_ex+0x21f/0x230 [ 3322.201911][T13634] __should_fail_alloc_page+0xfd/0x110 [ 3322.227007][T13634] __alloc_pages+0x108/0x340 [ 3322.231619][T13634] vma_alloc_folio+0x6a3/0x8c0 [ 3322.231665][T13634] shmem_get_folio_gfp+0x801/0x1200 [ 3322.231695][T13634] shmem_write_begin+0xa6/0x1d0 [ 3322.231717][T13634] generic_perform_write+0x1cf/0x410 [ 3322.231874][T13634] ? shmem_write_begin+0x1d0/0x1d0 [ 3322.231896][T13634] __generic_file_write_iter+0xa1/0x120 [ 3322.231922][T13634] generic_file_write_iter+0x7d/0x1c0 [ 3322.231950][T13634] vfs_write+0x4ab/0x7d0 [ 3322.231979][T13634] ksys_write+0xeb/0x1a0 [ 3322.232078][T13634] __x64_sys_write+0x42/0x50 [ 3322.232106][T13634] do_syscall_64+0x41/0xc0 [ 3322.232207][T13634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3322.232238][T13634] RIP: 0033:0x7ff0343a5ae9 [ 3322.297663][T13634] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3322.317680][T13634] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3322.326077][T13634] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3322.334138][T13634] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3322.342094][T13634] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3322.350080][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3322.358069][T13634] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:37 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 97) 14:58:37 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x7b3c2798654b8024, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/164) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000200)) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)=""/18) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x0, 0x2, 0xa1}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x7, 0x7f, "bb2d8b454fbdd0f27cb67b74d0889dbc6570e5", 0x5, 0x3}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/75) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x186}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/full\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x7b3c2798654b8024, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/164) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000200)) (async) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)=""/18) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x0, 0x2, 0xa1}}) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x7, 0x7f, "bb2d8b454fbdd0f27cb67b74d0889dbc6570e5", 0x5, 0x3}) (async) pipe(&(0x7f0000000040)) (async) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/75) (async) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x186}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/full\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfdfdffff}) 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x1000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xeffdffff}, 0x4008051) 14:58:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3322.366726][T13634] 14:58:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x4008051) 14:58:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffdfd}) 14:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f}, 0x4008051) [ 3322.422786][T13653] FAULT_INJECTION: forcing a failure. [ 3322.422786][T13653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3322.436038][T13653] CPU: 0 PID: 13653 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3322.436130][T13653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xfe800000}, 0x4008051) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xff010000}, 0x4008051) [ 3322.436142][T13653] Call Trace: [ 3322.436147][T13653] [ 3322.436154][T13653] dump_stack_lvl+0xda/0x130 [ 3322.436209][T13653] dump_stack+0x15/0x20 [ 3322.436309][T13653] should_fail_ex+0x21f/0x230 [ 3322.436328][T13653] should_fail+0xb/0x10 [ 3322.436345][T13653] should_fail_usercopy+0x1a/0x20 [ 3322.436375][T13653] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3322.436405][T13653] ? folio_test_hugetlb+0x3a/0x70 [ 3322.436488][T13653] ? shmem_write_begin+0x12a/0x1d0 [ 3322.436508][T13653] generic_perform_write+0x212/0x410 [ 3322.436537][T13653] ? shmem_write_begin+0x1d0/0x1d0 [ 3322.436563][T13653] __generic_file_write_iter+0xa1/0x120 [ 3322.436624][T13653] generic_file_write_iter+0x7d/0x1c0 [ 3322.436650][T13653] vfs_write+0x4ab/0x7d0 [ 3322.436749][T13653] ksys_write+0xeb/0x1a0 [ 3322.436824][T13653] __x64_sys_write+0x42/0x50 [ 3322.436871][T13653] do_syscall_64+0x41/0xc0 [ 3322.436892][T13653] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3322.436920][T13653] RIP: 0033:0x7ff0343a5ae9 [ 3322.436961][T13653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 98) [ 3322.436979][T13653] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3322.436997][T13653] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3322.437012][T13653] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3322.437025][T13653] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3322.437037][T13653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3322.437049][T13653] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3322.437065][T13653] [ 3322.633150][T13696] FAULT_INJECTION: forcing a failure. [ 3322.633150][T13696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3322.687360][T13696] CPU: 0 PID: 13696 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3322.697795][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3322.712550][T13696] Call Trace: [ 3322.715983][T13696] [ 3322.715988][T13696] dump_stack_lvl+0xda/0x130 14:58:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xfffffdef}, 0x4008051) 14:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xffffff7f}, 0x4008051) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xffffff97}, 0x4008051) [ 3322.716058][T13696] dump_stack+0x15/0x20 [ 3322.716071][T13696] should_fail_ex+0x21f/0x230 [ 3322.716083][T13696] __should_fail_alloc_page+0xfd/0x110 [ 3322.716098][T13696] __alloc_pages+0x108/0x340 [ 3322.716111][T13696] vma_alloc_folio+0x6a3/0x8c0 [ 3322.716168][T13696] shmem_get_folio_gfp+0x801/0x1200 [ 3322.716186][T13696] shmem_write_begin+0xa6/0x1d0 [ 3322.716268][T13696] generic_perform_write+0x1cf/0x410 [ 3322.716389][T13696] ? shmem_write_begin+0x1d0/0x1d0 [ 3322.716412][T13696] __generic_file_write_iter+0xa1/0x120 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xfffffff5}, 0x4008051) 14:58:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x4000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x4000000000000}, 0x4008051) [ 3322.773692][T13696] generic_file_write_iter+0x7d/0x1c0 [ 3322.779139][T13696] vfs_write+0x4ab/0x7d0 [ 3322.779172][T13696] ksys_write+0xeb/0x1a0 [ 3322.787749][T13696] __x64_sys_write+0x42/0x50 [ 3322.787815][T13696] do_syscall_64+0x41/0xc0 [ 3322.787839][T13696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3322.787870][T13696] RIP: 0033:0x7ff0343a5ae9 [ 3322.787886][T13696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3322.787905][T13696] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3322.787932][T13696] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3322.787946][T13696] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3322.787959][T13696] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3322.787972][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3322.867496][T13696] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 14:58:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 99) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x10000000000000}, 0x4008051) 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x6000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3322.867516][T13696] 14:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000600, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x80000000000000}, 0x4008051) 14:58:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) [ 3322.900400][T13724] FAULT_INJECTION: forcing a failure. [ 3322.900400][T13724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3322.913530][T13724] CPU: 0 PID: 13724 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3322.924024][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3322.924039][T13724] Call Trace: [ 3322.924044][T13724] [ 3322.924051][T13724] dump_stack_lvl+0xda/0x130 [ 3322.944942][T13724] dump_stack+0x15/0x20 14:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x100000000000000}, 0x4008051) 14:58:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) [ 3322.949219][T13724] should_fail_ex+0x21f/0x230 [ 3322.953965][T13724] should_fail+0xb/0x10 [ 3322.958132][T13724] should_fail_usercopy+0x1a/0x20 [ 3322.963180][T13724] copy_page_from_iter_atomic+0x22d/0xcf0 [ 3322.963213][T13724] ? folio_test_hugetlb+0x3a/0x70 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x200000000000000}, 0x4008051) 14:58:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) [ 3322.963234][T13724] ? shmem_write_begin+0x12a/0x1d0 [ 3322.963258][T13724] generic_perform_write+0x212/0x410 [ 3322.963319][T13724] ? shmem_write_begin+0x1d0/0x1d0 [ 3322.963344][T13724] __generic_file_write_iter+0xa1/0x120 [ 3322.963382][T13724] generic_file_write_iter+0x7d/0x1c0 [ 3322.963478][T13724] vfs_write+0x4ab/0x7d0 [ 3322.963508][T13724] ksys_write+0xeb/0x1a0 [ 3322.963536][T13724] __x64_sys_write+0x42/0x50 [ 3322.963576][T13724] do_syscall_64+0x41/0xc0 [ 3322.963603][T13724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3322.963632][T13724] RIP: 0033:0x7ff0343a5ae9 [ 3322.963645][T13724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:58:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (fail_nth: 100) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x300000000000000}, 0x4008051) [ 3322.963664][T13724] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3322.963686][T13724] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3322.963700][T13724] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 [ 3322.963714][T13724] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3322.963734][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2b860000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) 14:58:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x400000000000000}, 0x4008051) 14:58:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) [ 3322.963776][T13724] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3322.963791][T13724] [ 3323.156417][T13752] FAULT_INJECTION: forcing a failure. [ 3323.156417][T13752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3323.175737][T13752] CPU: 0 PID: 13752 Comm: syz-executor.3 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3323.186322][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3323.186336][T13752] Call Trace: [ 3323.186342][T13752] [ 3323.186348][T13752] dump_stack_lvl+0xda/0x130 [ 3323.186387][T13752] dump_stack+0x15/0x20 [ 3323.186410][T13752] should_fail_ex+0x21f/0x230 [ 3323.186472][T13752] __should_fail_alloc_page+0xfd/0x110 [ 3323.186517][T13752] __alloc_pages+0x108/0x340 [ 3323.186594][T13752] vma_alloc_folio+0x6a3/0x8c0 [ 3323.186651][T13752] shmem_get_folio_gfp+0x801/0x1200 [ 3323.186678][T13752] shmem_write_begin+0xa6/0x1d0 [ 3323.186700][T13752] generic_perform_write+0x1cf/0x410 [ 3323.186821][T13752] ? shmem_write_begin+0x1d0/0x1d0 [ 3323.186845][T13752] __generic_file_write_iter+0xa1/0x120 [ 3323.186875][T13752] generic_file_write_iter+0x7d/0x1c0 [ 3323.186901][T13752] vfs_write+0x4ab/0x7d0 [ 3323.186973][T13752] ksys_write+0xeb/0x1a0 [ 3323.187057][T13752] __x64_sys_write+0x42/0x50 [ 3323.187083][T13752] do_syscall_64+0x41/0xc0 [ 3323.187104][T13752] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3323.187190][T13752] RIP: 0033:0x7ff0343a5ae9 [ 3323.187226][T13752] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3323.187246][T13752] RSP: 002b:00007ff0337280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3323.187269][T13752] RAX: ffffffffffffffda RBX: 00007ff0344c4f80 RCX: 00007ff0343a5ae9 [ 3323.187293][T13752] RDX: 00000000fffffdef RSI: 0000000020000100 RDI: 0000000000000003 14:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x500000000000000}, 0x4008051) 14:58:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:38 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25030000002400078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="086695895e1640fd25268a48d5519d8a0597d168aa4a801721b36af23a0000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfdfdffff, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x600000000000000}, 0x4008051) 14:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffdfd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3323.187305][T13752] RBP: 00007ff033728120 R08: 0000000000000000 R09: 0000000000000000 [ 3323.187317][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3323.187329][T13752] R13: 000000000000000b R14: 00007ff0344c4f80 R15: 00007fffae37d058 [ 3323.187343][T13752] 14:58:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x700000000000000}, 0x4008051) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25030000002400078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="086695895e1640fd25268a48d5519d8a0597d168aa4a801721b36af23a0000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14:58:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x6000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x6}) 14:58:39 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x800000000000000}, 0x4008051) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x300}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000300, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25030000002400078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="086695895e1640fd25268a48d5519d8a0597d168aa4a801721b36af23a0000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14:58:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x600}) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x900000000000000}, 0x4008051) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x7, 0x9, 0x8, 0x6, 0x3}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x6, 0x6, 0x87, 0x4, 0xd5, "59411d18e695b8ad2a8b34e8c8fbc83a4cd00f", 0xac, 0x5}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x4, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x4008051) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x85c1}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x6, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x7, 0x9, 0x8, 0x6, 0x3}}) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async, rerun: 64) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x6, 0x6, 0x87, 0x4, 0xd5, "59411d18e695b8ad2a8b34e8c8fbc83a4cd00f", 0xac, 0x5}) (rerun: 64) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be28d197df"}) 14:58:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x4008051) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xc185}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x7, 0x9, 0x8, 0x6, 0x3}}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x6, 0x6, 0x87, 0x4, 0xd5, "59411d18e695b8ad2a8b34e8c8fbc83a4cd00f", 0xac, 0x5}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x4008051) 14:58:39 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x5, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x1000000}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2}) 14:58:39 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) socket$inet(0x2, 0x4, 0x401) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x4008051) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x4008051) 14:58:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2000000}) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) 14:58:39 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) (async) socket$inet(0x2, 0x4, 0x401) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x47ee000000000000}, 0x4008051) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) 14:58:39 executing program 0: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) socket$inet(0x2, 0x4, 0x401) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) (rerun: 32) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3000000}) 14:58:39 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x6, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x97ffffff00000000}, 0x4008051) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x6}) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4000000}) 14:58:39 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x5, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x300}) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xeffdffff00000000}, 0x4008051) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x6000000}) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xa, 0x8, 0x100, 0xfffffff7, 0xb, "f32925ef68602999f7cf0cd1228e68aadc4281"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x600}) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xa, 0x8, 0x100, 0xfffffff7, 0xb, "f32925ef68602999f7cf0cd1228e68aadc4281"}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x4008051) 14:58:39 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xc1850000}) 14:58:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f00000000}, 0x4008051) 14:58:39 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 32) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xa, 0x8, 0x100, 0xfffffff7, 0xb, "f32925ef68602999f7cf0cd1228e68aadc4281"}) (rerun: 32) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2b86}) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfdfdffff}) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xfe80000000000000}, 0x4008051) 14:58:40 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x862b}) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xff01000000000000}, 0x4008051) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffdfd}) 14:58:40 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xc, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:40 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x1000000}) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x4008051) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x4008051) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 14:58:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2000000}) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 14:58:40 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x10, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3000000}) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x131, 0x14, &(0x7f0000000040)}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x240400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000005c0)={0x4, 0xba, &(0x7f00000004c0)="672b231cc8c05e1710db6b66d45eeb5b3ce62a2e7288a4870e9254b771bd44181ce05cc6fe64b964e6ee3df9a96945935fdbbb6f4cc4171666d472e1c75f674f357efa87895fceb86315a907b7c2ddcb8196d54364d2d150b431ee657cb1fb6beefbbdf31352e927d4c4943e10f8fc5b3a4689bee1ccef681d7164389258f888128b4b5dc1b1dc9c5ffe08b5ce64959da5f199a107f1589ee6f3756656e3232a1f6cc26d0d398e15600c52bd0f92ba242d2c1abb37f85b7048b3"}) 14:58:40 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x4, 0x7, 0xfffffffe, 0x74c0, 0xd5, "5a755b3627b6ab3f147250aac5d3be15d197df"}) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4000000}) 14:58:40 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x4, 0x7, 0xfffffffe, 0x74c0, 0xd5, "5a755b3627b6ab3f147250aac5d3be15d197df"}) 14:58:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4008051) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x131, 0x14, &(0x7f0000000040)}) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x240400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000005c0)={0x4, 0xba, &(0x7f00000004c0)="672b231cc8c05e1710db6b66d45eeb5b3ce62a2e7288a4870e9254b771bd44181ce05cc6fe64b964e6ee3df9a96945935fdbbb6f4cc4171666d472e1c75f674f357efa87895fceb86315a907b7c2ddcb8196d54364d2d150b431ee657cb1fb6beefbbdf31352e927d4c4943e10f8fc5b3a4689bee1ccef681d7164389258f888128b4b5dc1b1dc9c5ffe08b5ce64959da5f199a107f1589ee6f3756656e3232a1f6cc26d0d398e15600c52bd0f92ba242d2c1abb37f85b7048b3"}) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x6000000}) 14:58:40 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x204, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:40 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x4, 0x7, 0xfffffffe, 0x74c0, 0xd5, "5a755b3627b6ab3f147250aac5d3be15d197df"}) 14:58:40 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2b860000}) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x131, 0x14, &(0x7f0000000040)}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x240400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000005c0)={0x4, 0xba, &(0x7f00000004c0)="672b231cc8c05e1710db6b66d45eeb5b3ce62a2e7288a4870e9254b771bd44181ce05cc6fe64b964e6ee3df9a96945935fdbbb6f4cc4171666d472e1c75f674f357efa87895fceb86315a907b7c2ddcb8196d54364d2d150b431ee657cb1fb6beefbbdf31352e927d4c4943e10f8fc5b3a4689bee1ccef681d7164389258f888128b4b5dc1b1dc9c5ffe08b5ce64959da5f199a107f1589ee6f3756656e3232a1f6cc26d0d398e15600c52bd0f92ba242d2c1abb37f85b7048b3"}) 14:58:40 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfdfdffff}) 14:58:40 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4008051) 14:58:40 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:40 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x402, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:40 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffdfd}) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4008051) 14:58:40 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/191) 14:58:40 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2}) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) ioctl$TCSETSW2(r0, 0x5453, 0x0) (rerun: 64) 14:58:40 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x406, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4008051) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/191) 14:58:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3}) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a403, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008051) 14:58:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x4008051) 14:58:40 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/191) 14:58:40 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a403, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a403, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4008051) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x500, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x6}) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008051) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff}) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4008051) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a403, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$TCSETSW2(r0, 0x5453, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffa648f540, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/11) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x200, 0x800) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/203) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008051) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x4008051) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x300}) 14:58:41 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff}) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008051) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x600, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TCFLSH(r1, 0x540b, 0x2) (async, rerun: 32) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffa648f540, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/11) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x200, 0x800) (rerun: 64) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/203) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x600}) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff}) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008051) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4008051) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x4008051) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2000002, 0x1000000, 0x3, 0x40, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x20}) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2b86}) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$TCSETSW2(r0, 0x5453, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffa648f540, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffffffffa648f540, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000040)=""/11) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x200, 0x800) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/203) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x862b}) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x604, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2000002, 0x1000000, 0x3, 0x40, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x20}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2000002, 0x1000000, 0x3, 0x40, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x20}) (async) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x4008051) 14:58:41 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x1000000}) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2000000}) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2000002, 0x1000000, 0x3, 0x40, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x20}) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x4008051) 14:58:41 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) (async, rerun: 64) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x18, 0x0}, 0x4008051) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4008051) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xc00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x2, 0x3000000, 0x2, 0x6, 0xab, "6e6c07ca23b8f9bfba76fb368dcb64abc49cb5", 0x7fff, 0x4}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x81, 0x9, 0x5, 0x3}}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x18, 0x0}, 0x0) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3000000}) 14:58:41 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4008051) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4000000}) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x2, 0x3000000, 0x2, 0x6, 0xab, "6e6c07ca23b8f9bfba76fb368dcb64abc49cb5", 0x7fff, 0x4}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x81, 0x9, 0x5, 0x3}}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x4008051) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x27ff, 0xe09a, 0x9, 0x53, 0xb, "2c9f1f50933ec330"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x123d) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x9, 0x8}) 14:58:41 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x600, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x6000000}) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8008, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x4008051) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x2, 0x3000000, 0x2, 0x6, 0xab, "6e6c07ca23b8f9bfba76fb368dcb64abc49cb5", 0x7fff, 0x4}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x81, 0x9, 0x5, 0x3}}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x27ff, 0xe09a, 0x9, 0x53, 0xb, "2c9f1f50933ec330"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x123d) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x9, 0x8}) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2b860000}) 14:58:41 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xc, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x4008051) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfdfdffff}) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6, 0x63e, 0x38c}) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)={0x14c, 0xb, &(0x7f00000005c0)}) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x27ff, 0xe09a, 0x9, 0x53, 0xb, "2c9f1f50933ec330"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x123d) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x9, 0x8}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x27ff, 0xe09a, 0x9, 0x53, 0xb, "2c9f1f50933ec330"}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x123d) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0x9, 0x8}) (async) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4008051) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6, 0x63e, 0x38c}) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)={0x14c, 0xb, &(0x7f00000005c0)}) 14:58:41 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf67e3, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xeec81, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffdfd}) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6, 0x63e, 0x38c}) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)={0x14c, 0xb, &(0x7f00000005c0)}) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x47ee}, 0x4008051) 14:58:41 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xc, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x1000003, 0x400, 0x0, 0x40, "147250aac5d3be15d197df00", 0x0, 0x40000000}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "a1fce26d1f03f941", "d49bbcf043f4869b52f766a996bcfafd", "84edaf3b", "c33824cbea134fdc"}, 0x28) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x828, 0x7ff, 0x7, 0x2, 0x7, "c35de28782d6c9cc"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="495001d2d739a084fe95b272d80c9c6f", 0x10) 14:58:41 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xeec81, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xeec81, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:41 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x80fe}, 0x4008051) 14:58:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x90000000, 0x1000000, 0x0, 0x0, 0x0, "5a01000000cc5fec0d0000000020004a00"}) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xee47}, 0x4008051) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x90000000, 0x1000000, 0x0, 0x0, 0x0, "5a01000000cc5fec0d0000000020004a00"}) 14:58:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x100000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xeec81, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xeec81, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x1000003, 0x400, 0x0, 0x40, "147250aac5d3be15d197df00", 0x0, 0x40000000}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "a1fce26d1f03f941", "d49bbcf043f4869b52f766a996bcfafd", "84edaf3b", "c33824cbea134fdc"}, 0x28) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x828, 0x7ff, 0x7, 0x2, 0x7, "c35de28782d6c9cc"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="495001d2d739a084fe95b272d80c9c6f", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="495001d2d739a084fe95b272d80c9c6f", 0x10) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe80}, 0x4008051) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x90000000, 0x1000000, 0x0, 0x0, 0x0, "5a01000000cc5fec0d0000000020004a00"}) 14:58:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xa5, 0x1c, &(0x7f0000000080)}) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff01}, 0x4008051) 14:58:42 executing program 0: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/4082) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x610481, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x200101, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000001240)=""/85) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000001140)={r3, r4/1000+10000}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000010c0)={0x2, {0x2, 0x3, 0x1, 0x8000, 0x6, 0x3}}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000011c0)) clock_gettime(0x6, &(0x7f0000001180)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000012c0)=""/43) 14:58:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x1000003, 0x400, 0x0, 0x40, "147250aac5d3be15d197df00", 0x0, 0x40000000}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "a1fce26d1f03f941", "d49bbcf043f4869b52f766a996bcfafd", "84edaf3b", "c33824cbea134fdc"}, 0x28) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "a1fce26d1f03f941", "d49bbcf043f4869b52f766a996bcfafd", "84edaf3b", "c33824cbea134fdc"}, 0x28) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x828, 0x7ff, 0x7, 0x2, 0x7, "c35de28782d6c9cc"}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="495001d2d739a084fe95b272d80c9c6f", 0x10) 14:58:42 executing program 0: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/4082) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x610481, 0x0) (async) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x200101, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000001240)=""/85) (async) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000001140)={r3, r4/1000+10000}, 0x10) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000010c0)={0x2, {0x2, 0x3, 0x1, 0x8000, 0x6, 0x3}}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000011c0)) (async) clock_gettime(0x6, &(0x7f0000001180)) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) (async) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000012c0)=""/43) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xa5, 0x1c, &(0x7f0000000080)}) (rerun: 64) 14:58:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x1000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4008051) 14:58:42 executing program 0: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/4082) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x610481, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001200), 0x200101, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000001240)=""/85) clock_gettime(0x0, &(0x7f0000001100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000001140)={r3, r4/1000+10000}, 0x10) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000010c0)={0x2, {0x2, 0x3, 0x1, 0x8000, 0x6, 0x3}}) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000011c0)) (async) clock_gettime(0x6, &(0x7f0000001180)) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) (async) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000012c0)=""/43) 14:58:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1f) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r4}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x8000004, r4, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 32) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0xa5, 0x1c, &(0x7f0000000080)}) (rerun: 32) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x4008051) 14:58:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1f) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r4}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x8000004, r4, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_pts(r0, 0x82000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3, 0x7fff, 0x8, 0x2c9, 0x13, "91fc370989df40b82968731f4e707219d269e8"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x6, 0x20, 0x4c101087, 0x9, "07820ebbafb3340895c8155e5276536f6d5f6c", 0x400, 0x6}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x6, 0x6, 0x9, 0x2, 0x5, "21f88a3fbe94429921ae96a117917d4c14635f", 0x3, 0x4ef2}) 14:58:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x4008051) 14:58:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_pts(r0, 0x82000) (async) r1 = syz_open_pts(r0, 0x82000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3, 0x7fff, 0x8, 0x2c9, 0x13, "91fc370989df40b82968731f4e707219d269e8"}) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3, 0x7fff, 0x8, 0x2c9, 0x13, "91fc370989df40b82968731f4e707219d269e8"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x6, 0x20, 0x4c101087, 0x9, "07820ebbafb3340895c8155e5276536f6d5f6c", 0x400, 0x6}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x6, 0x6, 0x9, 0x2, 0x5, "21f88a3fbe94429921ae96a117917d4c14635f", 0x3, 0x4ef2}) 14:58:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x4008051) 14:58:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1f) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r4}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x8000004, r4, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_pts(r0, 0x82000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x3, 0x7fff, 0x8, 0x2c9, 0x13, "91fc370989df40b82968731f4e707219d269e8"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x5, 0x6, 0x20, 0x4c101087, 0x9, "07820ebbafb3340895c8155e5276536f6d5f6c", 0x400, 0x6}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x6, 0x6, 0x9, 0x2, 0x5, "21f88a3fbe94429921ae96a117917d4c14635f", 0x3, 0x4ef2}) 14:58:42 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x4008051) 14:58:42 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@dev}, &(0x7f0000000080)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) 14:58:42 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2040000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aae4d3cc15d197df"}) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x4008051) 14:58:42 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@dev}, &(0x7f0000000080)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) 14:58:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:42 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aae4d3cc15d197df"}) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4008051) 14:58:42 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@dev}, &(0x7f0000000080)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@dev}, &(0x7f0000000080)=0x14) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) (async) 14:58:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:42 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aae4d3cc15d197df"}) 14:58:42 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x73, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xb8b}]}, 0x18) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x4) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x4008051) 14:58:42 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x4008051) 14:58:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x5, 0x0, 0x6, 0xffffffd5, 0x40, "c0e37f964b63f2f12db9b94c37960efc7443dc", 0x5, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x80, 0xf9, 0x4, 0x401, 0xc3b, 0x800}) 14:58:42 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:42 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:42 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x73, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xb8b}]}, 0x18) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x4) 14:58:42 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x5000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x5, 0x0, 0x6, 0xffffffd5, 0x40, "c0e37f964b63f2f12db9b94c37960efc7443dc", 0x5, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x80, 0xf9, 0x4, 0x401, 0xc3b, 0x800}) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x4008051) 14:58:43 executing program 4: socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x73, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xb8b}]}, 0x18) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000180)=0x4) (rerun: 64) 14:58:43 executing program 0: socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x4008051) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aacbd3be15d197df"}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x5, 0x0, 0x6, 0xffffffd5, 0x40, "c0e37f964b63f2f12db9b94c37960efc7443dc", 0x5, 0x2}) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 32) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x80, 0xf9, 0x4, 0x401, 0xc3b, 0x800}) 14:58:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x6000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1800"/14], 0x18}, 0x0) syz_open_pts(r0, 0x80500) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x4008051) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aacbd3be15d197df"}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aacbd3be15d197df"}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x100) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 14:58:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x4008051) 14:58:43 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1800"/14], 0x18}, 0x0) syz_open_pts(r0, 0x80500) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x6040000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x4008051) 14:58:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_pts(r3, 0x44c00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1800"/14], 0x18}, 0x0) syz_open_pts(r0, 0x80500) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r1, &(0x7f00000018c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1800"/14], 0x18}, 0x0) (async) syz_open_pts(r0, 0x80500) (async) 14:58:43 executing program 4: select(0x40, &(0x7f0000000000)={0x7, 0x8, 0xffffffffffffffff, 0x1, 0xa013, 0x66, 0x3, 0xffffffffffffff39}, &(0x7f0000000080)={0x325e8101, 0x4800000000, 0x7, 0x0, 0x4, 0xffff, 0x0, 0x32ff}, &(0x7f00000000c0)={0x8000000000000001, 0x80, 0x1000, 0x3, 0x8000, 0x5, 0xfffffffffffff98f, 0x9}, &(0x7f0000000100)={0x0, 0xea60}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 4: select(0x40, &(0x7f0000000000)={0x7, 0x8, 0xffffffffffffffff, 0x1, 0xa013, 0x66, 0x3, 0xffffffffffffff39}, &(0x7f0000000080)={0x325e8101, 0x4800000000, 0x7, 0x0, 0x4, 0xffff, 0x0, 0x32ff}, &(0x7f00000000c0)={0x8000000000000001, 0x80, 0x1000, 0x3, 0x8000, 0x5, 0xfffffffffffff98f, 0x9}, &(0x7f0000000100)={0x0, 0xea60}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8001, 0xffff, 0x2, 0x3, 0x8, "6110c6effc883362"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x4008051) 14:58:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) (async) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x8) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_pts(r3, 0x44c00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) 14:58:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8001, 0xffff, 0x2, 0x3, 0x8, "6110c6effc883362"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:43 executing program 4: select(0x40, &(0x7f0000000000)={0x7, 0x8, 0xffffffffffffffff, 0x1, 0xa013, 0x66, 0x3, 0xffffffffffffff39}, &(0x7f0000000080)={0x325e8101, 0x4800000000, 0x7, 0x0, 0x4, 0xffff, 0x0, 0x32ff}, &(0x7f00000000c0)={0x8000000000000001, 0x80, 0x1000, 0x3, 0x8000, 0x5, 0xfffffffffffff98f, 0x9}, &(0x7f0000000100)={0x0, 0xea60}) (async, rerun: 64) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x4008051) 14:58:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_pts(r3, 0x44c00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8001, 0xffff, 0x2, 0x3, 0x8, "6110c6effc883362"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000003, 0x0, 0x2, 0xc5, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x7ff8000, 0x0, 0x20, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffffe}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDDISABIO(r1, 0x4b37) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x4008051) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000003, 0x0, 0x2, 0xc5, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x47ee0000}, 0x4008051) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x7ff8000, 0x0, 0x20, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffffe}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDDISABIO(r1, 0x4b37) (async) ioctl$KDDISABIO(r1, 0x4b37) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8800000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000003, 0x0, 0x2, 0xc5, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) pipe(&(0x7f0000000040)) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}, 0x4008051) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x7ff8000, 0x0, 0x20, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffffe}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x7ff8000, 0x0, 0x20, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0xfffffffe}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x97ffffff}, 0x4008051) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x20}, @private1, @private0, 0xfef0, 0xfffa, 0x6, 0x80, 0x2, 0x1040280}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9e6, 0x1000, 0x2, 0x2, "5bebf5f29782ae3cdb12acb396089d5bdd6ca2", 0x3f}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:58:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}, 0x4008051) 14:58:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xc000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x20}, @private1, @private0, 0xfef0, 0xfffa, 0x6, 0x80, 0x2, 0x1040280}) (rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9e6, 0x1000, 0x2, 0x2, "5bebf5f29782ae3cdb12acb396089d5bdd6ca2", 0x3f}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x4008051) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 14:58:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400580) syz_open_pts(r1, 0xc240) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffff) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 14:58:43 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}, 0x4008051) 14:58:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x20}, @private1, @private0, 0xfef0, 0xfffa, 0x6, 0x80, 0x2, 0x1040280}) (rerun: 32) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x5, 0x9e6, 0x1000, 0x2, 0x2, "5bebf5f29782ae3cdb12acb396089d5bdd6ca2", 0x3f}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400580) syz_open_pts(r1, 0xc240) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffff) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe800000}, 0x4008051) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xe3670f00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x7}) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400580) syz_open_pts(r1, 0xc240) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffff) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400580) (async) syz_open_pts(r1, 0xc240) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffff) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff010000}, 0x4008051) 14:58:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0x4008051) 14:58:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x7}) 14:58:44 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 14:58:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x7}) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 14:58:44 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$KDDISABIO(r2, 0x4b37) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x934, 0xc0, "423392cb742b1722d216728f2b7f49b943fd66", 0x6e79, 0x80000000}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x4008051) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa02, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDDISABIO(r2, 0x4b37) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x4008051) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x934, 0xc0, "423392cb742b1722d216728f2b7f49b943fd66", 0x6e79, 0x80000000}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x4008051) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffd}, 0x1c, 0x0}, 0x4008051) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa04, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x934, 0xc0, "423392cb742b1722d216728f2b7f49b943fd66", 0x6e79, 0x80000000}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x1, 0x200}) r3 = getpgrp(0xffffffffffffffff) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={r3, 0x1, 0x7}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02f9c4e1830fe1ffffffffffffff06009b7b1e"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x3ff, 0x0, 0x6}) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x1, 0x200}) r3 = getpgrp(0xffffffffffffffff) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={r3, 0x1, 0x7}) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={r3, 0x1, 0x7}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02f9c4e1830fe1ffffffffffffff06009b7b1e"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x3ff, 0x0, 0x6}) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) (rerun: 64) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (rerun: 64) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffd}, 0x1c, 0x0}, 0x4008051) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) (async) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa05, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x1, 0x200}) r3 = getpgrp(0xffffffffffffffff) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={r3, 0x1, 0x7}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02f9c4e1830fe1ffffffffffffff06009b7b1e"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x3ff, 0x0, 0x6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) pipe(&(0x7f0000000080)) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x1, 0x200}) (async) getpgrp(0xffffffffffffffff) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={r3, 0x1, 0x7}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="02f9c4e1830fe1ffffffffffffff06009b7b1e"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x3ff, 0x0, 0x6}) (async) 14:58:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffd}, 0x1c, 0x0}, 0x4008051) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8fa4}) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8fa4}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8fa4}) 14:58:44 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff, 0x0, 0x1, 0xb, 0x8, 0x81}, &(0x7f0000000040)=0x20) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x8, 0x800]) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x2, 0x4) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) 14:58:44 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa06, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8fa4}) 14:58:44 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x2, 0x4) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:58:44 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff, 0x0, 0x1, 0xb, 0x8, 0x81}, &(0x7f0000000040)=0x20) 14:58:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x8, 0x800]) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:58:44 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff, 0x0, 0x1, 0xb, 0x8, 0x81}, &(0x7f0000000040)=0x20) 14:58:44 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x8, 0x800]) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0xfffff230, 0x1, 0x7ff, 0x4, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x44}) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x2, 0x4) (async) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) 14:58:44 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 14:58:44 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa08, {0x0, 0x0}}, 0xfffffdef) 14:58:44 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:44 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x400, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x660802) r5 = syz_open_pts(r2, 0x50000) ioctl$KIOCSOUND(r5, 0x4b2f, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000100)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5453, 0x0) 14:58:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0xfffff230, 0x1, 0x7ff, 0x4, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x44}) 14:58:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x170f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) 14:58:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:45 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x170f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) 14:58:45 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0xfffff230, 0x1, 0x7ff, 0x4, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x44}) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x400, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x660802) r5 = syz_open_pts(r2, 0x50000) ioctl$KIOCSOUND(r5, 0x4b2f, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000100)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5453, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x400, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x660802) (async) syz_open_pts(r2, 0x50000) (async) ioctl$KIOCSOUND(r5, 0x4b2f, 0x4) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000100)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r6, 0x5453, 0x0) (async) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x170f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) 14:58:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa0c, {0x0, 0x0}}, 0xfffffdef) 14:58:45 executing program 5: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x1) 14:58:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x400, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x400, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x660802) r5 = syz_open_pts(r2, 0x50000) ioctl$KIOCSOUND(r5, 0x4b2f, 0x4) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000100)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5453, 0x0) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 5: pipe(&(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380200, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x1) 14:58:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0xfffffdef) 14:58:45 executing program 5: pipe(&(0x7f0000000000)) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380200, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380200, 0x0) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x1) 14:58:45 executing program 5: pipe(&(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:45 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x8, 0x2, 0x1d9c, 0x8, 0x3, "4f987a3de74f72ca8b271947a0c140ee3493f8"}) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380200, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000006000000010000000000000000000000000001000000000000"], 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x800, 0x3ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)={0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, 0x10) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x4, 0x75, &(0x7f0000000080)="deec3036a2bfdd8be15bbd1f1cf5f5adda654bb7241f7fbeaed9611ab5b34a9b518a0b09ca6fccbe79146ad1ad0ff3c5657c2e094db41e8d6a01a6e7ae9ce327f1fcf8b88e57868cfde17dc79922bf89faadf76fdf92839c5b23290f6b75da8fb797f36eddd935bf212a3ad8240615485b16a797f7"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f00000001c0)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b179997df8000", 0x0, 0x5}) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0xfffffdef) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = socket$inet6(0xa, 0x6, 0xfffffffb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)="33857a70f98d6b6ec3105e820e51ae2ae0f730fb3c7123e5d6c988ba7b5dbc0f53cdf6394aa37846875d2bd5487c10fa9b2d70f650e20cbf1224d7bcc5625d642a3091cf2a41a2f627480e07c443f0fad49ce7e5f917e910c8645208786a8ca32c470f67ac0f831f0f26266c7cae3be71a180443247d32c32e3f55a40e7d8407ec6e05c4da0199cc1bc62b78fb2112ff6f1c1724f2831ca70b92d1b0fe3c096d6a7854d0c2aa", &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet_mptcp(0x2, 0x1, 0x106) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x8, 0x2, 0x1d9c, 0x8, 0x3, "4f987a3de74f72ca8b271947a0c140ee3493f8"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x8, 0x2, 0x1d9c, 0x8, 0x3, "4f987a3de74f72ca8b271947a0c140ee3493f8"}) (async) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 14:58:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 4: socket$inet6(0xa, 0x2, 0x3) (async) r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000006000000010000000000000000000000000001000000000000"], 0x20) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000006000000010000000000000000000000000001000000000000"], 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x800, 0x3ff) (async) r3 = socket$inet6(0xa, 0x800, 0x3ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)={0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, 0x10) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x4, 0x75, &(0x7f0000000080)="deec3036a2bfdd8be15bbd1f1cf5f5adda654bb7241f7fbeaed9611ab5b34a9b518a0b09ca6fccbe79146ad1ad0ff3c5657c2e094db41e8d6a01a6e7ae9ce327f1fcf8b88e57868cfde17dc79922bf89faadf76fdf92839c5b23290f6b75da8fb797f36eddd935bf212a3ad8240615485b16a797f7"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f00000001c0)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b179997df8000", 0x0, 0x5}) 14:58:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x8, 0x2, 0x1d9c, 0x8, 0x3, "4f987a3de74f72ca8b271947a0c140ee3493f8"}) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r2 = socket$inet6(0xa, 0x6, 0xfffffffb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)="33857a70f98d6b6ec3105e820e51ae2ae0f730fb3c7123e5d6c988ba7b5dbc0f53cdf6394aa37846875d2bd5487c10fa9b2d70f650e20cbf1224d7bcc5625d642a3091cf2a41a2f627480e07c443f0fad49ce7e5f917e910c8645208786a8ca32c470f67ac0f831f0f26266c7cae3be71a180443247d32c32e3f55a40e7d8407ec6e05c4da0199cc1bc62b78fb2112ff6f1c1724f2831ca70b92d1b0fe3c096d6a7854d0c2aa", &(0x7f00000000c0)=@tcp6=r2}, 0x20) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet_mptcp(0x2, 0x1, 0x106) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 64) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x6, 0xfffffffb) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000)="33857a70f98d6b6ec3105e820e51ae2ae0f730fb3c7123e5d6c988ba7b5dbc0f53cdf6394aa37846875d2bd5487c10fa9b2d70f650e20cbf1224d7bcc5625d642a3091cf2a41a2f627480e07c443f0fad49ce7e5f917e910c8645208786a8ca32c470f67ac0f831f0f26266c7cae3be71a180443247d32c32e3f55a40e7d8407ec6e05c4da0199cc1bc62b78fb2112ff6f1c1724f2831ca70b92d1b0fe3c096d6a7854d0c2aa", &(0x7f00000000c0)=@tcp6=r2}, 0x20) (async, rerun: 32) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, 0x0}}, 0xfffffdef) 14:58:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000006000000010000000000000000000000000001000000000000"], 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x800, 0x3ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000180)={0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, 0x10) (async) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x4, 0x75, &(0x7f0000000080)="deec3036a2bfdd8be15bbd1f1cf5f5adda654bb7241f7fbeaed9611ab5b34a9b518a0b09ca6fccbe79146ad1ad0ff3c5657c2e094db41e8d6a01a6e7ae9ce327f1fcf8b88e57868cfde17dc79922bf89faadf76fdf92839c5b23290f6b75da8fb797f36eddd935bf212a3ad8240615485b16a797f7"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f00000001c0)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b179997df8000", 0x0, 0x5}) 14:58:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c, 0x0}, 0x4040051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x105, 0x5, &(0x7f0000000680)}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x3f, 0x1f}, 0x10) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c, 0x0}, 0x4040051) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x105, 0x5, &(0x7f0000000680)}) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x3f, 0x1f}, 0x10) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb70) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4fe80d0e6db398be", "c85f6dd9f89b69b614d81af411692f96", "52d870d1", "71033993113e3feb"}, 0x28) 14:58:45 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6, 0x0}}, 0xfffffdef) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c, 0x0}, 0x4040051) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x105, 0x5, &(0x7f0000000680)}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x3f, 0x1f}, 0x10) 14:58:45 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x40000002, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff, 0xfffffffd}) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb70) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb70) (async) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4fe80d0e6db398be", "c85f6dd9f89b69b614d81af411692f96", "52d870d1", "71033993113e3feb"}, 0x28) 14:58:45 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x40000002, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff, 0xfffffffd}) 14:58:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4fe80d0e6db398be", "c85f6dd9f89b69b614d81af411692f96", "52d870d1", "71033993113e3feb"}, 0x28) 14:58:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x800, 0x200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:45 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb70) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb70) (async) 14:58:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x800, 0x200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8, 0x0}}, 0xfffffdef) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x100, 0x0, 0x0, "5a755b3803000000ede600"}) 14:58:46 executing program 4: setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x40000002, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xffffffff, 0xfffffffd}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x800, 0x200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x100, 0x0, 0x0, "5a755b3803000000ede600"}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x101, 0xffffff, 0x6, 0x2000, 0x6, "80717138da5d3754230550aa9ae35110040400", 0x6, 0x7}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x100, 0x0, 0x0, "5a755b3803000000ede600"}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x1f, '\x00', [@calipso={0x7, 0x58, {0x6, 0x14, 0x80, 0xb10, [0xcdc9, 0xe0000000000000, 0x4, 0x100000001, 0x2, 0x1, 0x3e51, 0x2, 0x1, 0xfa4]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x7b, "eb8a01ce67734e4bb87ff72fb86bb2b5d423acce0a4e7b6c53c4c279552b583f6417c541fdd9f02069ee75b394071ab6274aebb99b93c4d0ae241d11f90f4e5f3496bcac6748557f876efb6509ed4cffafc41ddc99a8945cd79389c634aa28c8e28f7f14aeeb30ddd19eb4eb7e9d71559c1b4f0bd9b62130be7940"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x40}]}, 0x108) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xc, 0x0}}, 0xfffffdef) 14:58:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x101, 0xffffff, 0x6, 0x2000, 0x6, "80717138da5d3754230550aa9ae35110040400", 0x6, 0x7}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x100002}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x1f, '\x00', [@calipso={0x7, 0x58, {0x6, 0x14, 0x80, 0xb10, [0xcdc9, 0xe0000000000000, 0x4, 0x100000001, 0x2, 0x1, 0x3e51, 0x2, 0x1, 0xfa4]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x7b, "eb8a01ce67734e4bb87ff72fb86bb2b5d423acce0a4e7b6c53c4c279552b583f6417c541fdd9f02069ee75b394071ab6274aebb99b93c4d0ae241d11f90f4e5f3496bcac6748557f876efb6509ed4cffafc41ddc99a8945cd79389c634aa28c8e28f7f14aeeb30ddd19eb4eb7e9d71559c1b4f0bd9b62130be7940"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x40}]}, 0x108) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x1f, '\x00', [@calipso={0x7, 0x58, {0x6, 0x14, 0x80, 0xb10, [0xcdc9, 0xe0000000000000, 0x4, 0x100000001, 0x2, 0x1, 0x3e51, 0x2, 0x1, 0xfa4]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x7b, "eb8a01ce67734e4bb87ff72fb86bb2b5d423acce0a4e7b6c53c4c279552b583f6417c541fdd9f02069ee75b394071ab6274aebb99b93c4d0ae241d11f90f4e5f3496bcac6748557f876efb6509ed4cffafc41ddc99a8945cd79389c634aa28c8e28f7f14aeeb30ddd19eb4eb7e9d71559c1b4f0bd9b62130be7940"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x40}]}, 0x108) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9cb91ccb8db4c0fa10cf0ec9cbd523c6acbb4e2c6ec7f49741be3b14b3b4bd3e91abf05cfbcebe3903b0e61115075cba05289987e5f87e8e9fd8a2097225aefdb310b7cbdcadf0a6f8f96167e3fe9681320234538778369b64dfc593ffb36de8de9301e756b48df18ebaab27d0933967d4f0610838bd42a1438ef62f6f1d222b27d650e7cca8c87361f8a408ed42283496f9d2b6db0288c903318cc1f9673978257c949d7db06de6b72021d74f4aa3f172aa4835b5e9f3e318d635609b2d1f1a043763514f422806fa2c5eac731a11967078b7545bad26d82d71effa67b224bb1a3ddc335c4eb53e0c90c6652009c6", 0xef}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x100002}) 14:58:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x101, 0xffffff, 0x6, 0x2000, 0x6, "80717138da5d3754230550aa9ae35110040400", 0x6, 0x7}) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x101, 0xffffff, 0x6, 0x2000, 0x6, "80717138da5d3754230550aa9ae35110040400", 0x6, 0x7}) (async) 14:58:46 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, 0x0}}, 0xfffffdef) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x1f, '\x00', [@calipso={0x7, 0x58, {0x6, 0x14, 0x80, 0xb10, [0xcdc9, 0xe0000000000000, 0x4, 0x100000001, 0x2, 0x1, 0x3e51, 0x2, 0x1, 0xfa4]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x7b, "eb8a01ce67734e4bb87ff72fb86bb2b5d423acce0a4e7b6c53c4c279552b583f6417c541fdd9f02069ee75b394071ab6274aebb99b93c4d0ae241d11f90f4e5f3496bcac6748557f876efb6509ed4cffafc41ddc99a8945cd79389c634aa28c8e28f7f14aeeb30ddd19eb4eb7e9d71559c1b4f0bd9b62130be7940"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x40}]}, 0x108) 14:58:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0xfffffe, 0x0, 0x0, 0x0, "5a406c0ad26bd4f6d9e950aac5020001d197b3", 0x4, 0x100005}) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10, 0x0}}, 0xfffffdef) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9cb91ccb8db4c0fa10cf0ec9cbd523c6acbb4e2c6ec7f49741be3b14b3b4bd3e91abf05cfbcebe3903b0e61115075cba05289987e5f87e8e9fd8a2097225aefdb310b7cbdcadf0a6f8f96167e3fe9681320234538778369b64dfc593ffb36de8de9301e756b48df18ebaab27d0933967d4f0610838bd42a1438ef62f6f1d222b27d650e7cca8c87361f8a408ed42283496f9d2b6db0288c903318cc1f9673978257c949d7db06de6b72021d74f4aa3f172aa4835b5e9f3e318d635609b2d1f1a043763514f422806fa2c5eac731a11967078b7545bad26d82d71effa67b224bb1a3ddc335c4eb53e0c90c6652009c6", 0xef}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:58:46 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x100002}) 14:58:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0xfffffe, 0x0, 0x0, 0x0, "5a406c0ad26bd4f6d9e950aac5020001d197b3", 0x4, 0x100005}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x1, 0x7ff, 0x10001, 0x8000, 0xd, "d2331403153fe1dc501300d26d07135131b4a3"}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "4fe80d0e6db398be", "c85f6dd9f89b69b614d81af411692f96", "52d870d1", "71033993113e3feb"}, 0x28) 14:58:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0xfffffe, 0x0, 0x0, 0x0, "5a406c0ad26bd4f6d9e950aac5020001d197b3", 0x4, 0x100005}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) sendmsg$802154_dgram(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="9cb91ccb8db4c0fa10cf0ec9cbd523c6acbb4e2c6ec7f49741be3b14b3b4bd3e91abf05cfbcebe3903b0e61115075cba05289987e5f87e8e9fd8a2097225aefdb310b7cbdcadf0a6f8f96167e3fe9681320234538778369b64dfc593ffb36de8de9301e756b48df18ebaab27d0933967d4f0610838bd42a1438ef62f6f1d222b27d650e7cca8c87361f8a408ed42283496f9d2b6db0288c903318cc1f9673978257c949d7db06de6b72021d74f4aa3f172aa4835b5e9f3e318d635609b2d1f1a043763514f422806fa2c5eac731a11967078b7545bad26d82d71effa67b224bb1a3ddc335c4eb53e0c90c6652009c6", 0xef}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDDISABIO(r0, 0x4b37) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x1, 0x7ff, 0x10001, 0x8000, 0xd, "d2331403153fe1dc501300d26d07135131b4a3"}) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x204, 0x0}}, 0xfffffdef) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}, @enter_looper, @release, @dead_binder_done], 0xea, 0x0, &(0x7f00000001c0)="29091d5b65b68e656cc4b81164edcd74c5aa0afc42041ff9be3150589ab5057522241abb5278458d76805b7b1b49e188b9943898d7cdefae81bca42474b2fb6ea3c071617e192cc78fbdecf0ca1aab7a18f0c93dec4b8233e01f1269c9dc8f4b1ccf7d77f860820e3bb0e1a5f0d907972b965d37e3defafc9d34bc79404481e7c2e18685364a0d3c3aacb11311fe362f3b70c4028c6a2e9c72004a61ce32a928aaafc87ea319baa7870113590daa6aef2d6b5f784e10130676cf7612a5bb6d69559d1d651b24c391e754468fae7d452e3c089769d6743a4744f2e721e03d4e6f01ac02f781ceaf6f50fa"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000a0) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x60) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x401, 0x145a00) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/175) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x6, 0x8) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000080)=""/8) 14:58:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KDDISABIO(r0, 0x4b37) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x1, 0x7ff, 0x10001, 0x8000, 0xd, "d2331403153fe1dc501300d26d07135131b4a3"}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x6, 0x8) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000080)=""/8) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}, @enter_looper, @release, @dead_binder_done], 0xea, 0x0, &(0x7f00000001c0)="29091d5b65b68e656cc4b81164edcd74c5aa0afc42041ff9be3150589ab5057522241abb5278458d76805b7b1b49e188b9943898d7cdefae81bca42474b2fb6ea3c071617e192cc78fbdecf0ca1aab7a18f0c93dec4b8233e01f1269c9dc8f4b1ccf7d77f860820e3bb0e1a5f0d907972b965d37e3defafc9d34bc79404481e7c2e18685364a0d3c3aacb11311fe362f3b70c4028c6a2e9c72004a61ce32a928aaafc87ea319baa7870113590daa6aef2d6b5f784e10130676cf7612a5bb6d69559d1d651b24c391e754468fae7d452e3c089769d6743a4744f2e721e03d4e6f01ac02f781ceaf6f50fa"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000a0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp], 0x2) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}, @enter_looper, @release, @dead_binder_done], 0xea, 0x0, &(0x7f00000001c0)="29091d5b65b68e656cc4b81164edcd74c5aa0afc42041ff9be3150589ab5057522241abb5278458d76805b7b1b49e188b9943898d7cdefae81bca42474b2fb6ea3c071617e192cc78fbdecf0ca1aab7a18f0c93dec4b8233e01f1269c9dc8f4b1ccf7d77f860820e3bb0e1a5f0d907972b965d37e3defafc9d34bc79404481e7c2e18685364a0d3c3aacb11311fe362f3b70c4028c6a2e9c72004a61ce32a928aaafc87ea319baa7870113590daa6aef2d6b5f784e10130676cf7612a5bb6d69559d1d651b24c391e754468fae7d452e3c089769d6743a4744f2e721e03d4e6f01ac02f781ceaf6f50fa"}) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) (async) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000a0) (async) 14:58:46 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x60) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x401, 0x145a00) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/175) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x6, 0x8) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000080)=""/8) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x402, 0x0}}, 0xfffffdef) 14:58:46 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp], 0x2) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}, @enter_looper, @release, @dead_binder_done], 0xea, 0x0, &(0x7f00000001c0)="29091d5b65b68e656cc4b81164edcd74c5aa0afc42041ff9be3150589ab5057522241abb5278458d76805b7b1b49e188b9943898d7cdefae81bca42474b2fb6ea3c071617e192cc78fbdecf0ca1aab7a18f0c93dec4b8233e01f1269c9dc8f4b1ccf7d77f860820e3bb0e1a5f0d907972b965d37e3defafc9d34bc79404481e7c2e18685364a0d3c3aacb11311fe362f3b70c4028c6a2e9c72004a61ce32a928aaafc87ea319baa7870113590daa6aef2d6b5f784e10130676cf7612a5bb6d69559d1d651b24c391e754468fae7d452e3c089769d6743a4744f2e721e03d4e6f01ac02f781ceaf6f50fa"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) (async, rerun: 32) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000a0) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x4008051) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x60) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x401, 0x145a00) (rerun: 64) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/175) (async, rerun: 32) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) (rerun: 32) 14:58:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x4008051) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x4008051) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) 14:58:46 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x20000) bind$802154_dgram(r1, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7f, 0x40, 0xee}) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "3d755a30bfb6ab3f147232aad197df00"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x3, 0x7, 0x10001, 0x10000, 0x1, "7d713278681369373df1ce0d46b61b318f88e8"}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0xabb6, 0x101}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x52d441, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x406, 0x0}}, 0xfffffdef) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x4008051) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x4008051) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) 14:58:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x19f, 0x9, &(0x7f0000000080)}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x52d441, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x52d441, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x20000) (rerun: 32) bind$802154_dgram(r1, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7f, 0x40, 0xee}) (async) ioctl$KDDISABIO(r0, 0x4b37) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "3d755a30bfb6ab3f147232aad197df00"}) (async, rerun: 64) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x3, 0x7, 0x10001, 0x10000, 0x1, "7d713278681369373df1ce0d46b61b318f88e8"}) (rerun: 64) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0xabb6, 0x101}) 14:58:46 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x52d441, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x19f, 0x9, &(0x7f0000000080)}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x20000) bind$802154_dgram(r1, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7f, 0x40, 0xee}) (async, rerun: 32) ioctl$KDDISABIO(r0, 0x4b37) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "3d755a30bfb6ab3f147232aad197df00"}) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000180)={0x3, 0x7, 0x10001, 0x10000, 0x1, "7d713278681369373df1ce0d46b61b318f88e8"}) (async) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0xabb6, 0x101}) 14:58:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000000)={0xb7a, {{0xa, 0x4e20, 0x0, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x2800, @mcast2, 0x8}}}, 0x108) 14:58:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x19f, 0x9, &(0x7f0000000080)}) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x500, 0x0}}, 0xfffffdef) 14:58:47 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7fff, 0x6}) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000000)={0xb7a, {{0xa, 0x4e20, 0x0, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x2800, @mcast2, 0x8}}}, 0x108) 14:58:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xd9, 0x4, 0x6, 0x6, 0x8, "b03584905cc35451"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xb17e8173e9cd93ce, 0x0) connect$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/36) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x44a, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/4096) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000011c0)=[0x8, 0x4]) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000000)={0xb7a, {{0xa, 0x4e20, 0x0, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x2800, @mcast2, 0x8}}}, 0x108) 14:58:47 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xb17e8173e9cd93ce, 0x0) connect$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/36) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x44a, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/4096) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000011c0)=[0x8, 0x4]) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xb17e8173e9cd93ce, 0x0) (async) connect$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/36) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x44a, 0x0) (async) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/4096) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000011c0)=[0x8, 0x4]) (async) 14:58:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xd9, 0x4, 0x6, 0x6, 0x8, "b03584905cc35451"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7fff, 0x6}) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x7fff, 0x6}) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x600, 0x0}}, 0xfffffdef) 14:58:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xd9, 0x4, 0x6, 0x6, 0x8, "b03584905cc35451"}) ioctl$TCSETSW2(r0, 0x5453, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xd9, 0x4, 0x6, 0x6, 0x8, "b03584905cc35451"}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:47 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="658f29d33d6cba516c610c3addf9d2fa153dc4678e29b2cd35aad3eec8329cb523c10378d586976879d0fd66fe01cc77d963985629a297918f581907f0316ccaf78d681f4bf37166fec16b932e9b5e8280936ffe9f485e33f48816", 0x5b}], 0x1, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}], 0x58}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x30880, 0x0) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x40080d0) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xb17e8173e9cd93ce, 0x0) connect$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001140)=""/36) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x44a, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000140)=""/4096) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000011c0)=[0x8, 0x4]) 14:58:47 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="658f29d33d6cba516c610c3addf9d2fa153dc4678e29b2cd35aad3eec8329cb523c10378d586976879d0fd66fe01cc77d963985629a297918f581907f0316ccaf78d681f4bf37166fec16b932e9b5e8280936ffe9f485e33f48816", 0x5b}], 0x1, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}], 0x58}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x30880, 0x0) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x40080d0) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/111) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x2, 0x40, 0x2, 0x2}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ebc662195838db9f", "aaca1805e2600acf0da19022e6bf1449", "f44455d4", "64ab5b71a3ab9d65"}, 0x28) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000200)={0x5, 0x38, &(0x7f00000001c0)="f8628555508a874b01addf1647e759e2cba37c1e2f9748c563e3df45ee42ecae5b0b72263280b823c7b8915a4d23aaaad40062ab9f6a5d5c"}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000280)={0x5, 0x80, 0x1}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="658f29d33d6cba516c610c3addf9d2fa153dc4678e29b2cd35aad3eec8329cb523c10378d586976879d0fd66fe01cc77d963985629a297918f581907f0316ccaf78d681f4bf37166fec16b932e9b5e8280936ffe9f485e33f48816", 0x5b}], 0x1, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}], 0x58}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x30880, 0x0) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x40080d0) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x604, 0x0}}, 0xfffffdef) 14:58:47 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/111) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x2, 0x40, 0x2, 0x2}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ebc662195838db9f", "aaca1805e2600acf0da19022e6bf1449", "f44455d4", "64ab5b71a3ab9d65"}, 0x28) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000200)={0x5, 0x38, &(0x7f00000001c0)="f8628555508a874b01addf1647e759e2cba37c1e2f9748c563e3df45ee42ecae5b0b72263280b823c7b8915a4d23aaaad40062ab9f6a5d5c"}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000280)={0x5, 0x80, 0x1}) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x2, 0x40, 0x2, 0x2}}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ebc662195838db9f", "aaca1805e2600acf0da19022e6bf1449", "f44455d4", "64ab5b71a3ab9d65"}, 0x28) (async) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000200)={0x5, 0x38, &(0x7f00000001c0)="f8628555508a874b01addf1647e759e2cba37c1e2f9748c563e3df45ee42ecae5b0b72263280b823c7b8915a4d23aaaad40062ab9f6a5d5c"}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000280)={0x5, 0x80, 0x1}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 64) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/111) (rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x1, 0x2, 0x40, 0x2, 0x2}}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x3, 0x8) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ebc662195838db9f", "aaca1805e2600acf0da19022e6bf1449", "f44455d4", "64ab5b71a3ab9d65"}, 0x28) (async) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000180)) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000200)={0x5, 0x38, &(0x7f00000001c0)="f8628555508a874b01addf1647e759e2cba37c1e2f9748c563e3df45ee42ecae5b0b72263280b823c7b8915a4d23aaaad40062ab9f6a5d5c"}) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000280)={0x5, 0x80, 0x1}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xc00, 0x0}}, 0xfffffdef) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x941b, 0x1, 0x5}) r2 = syz_open_pts(r0, 0x200000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x80, 0x0, &(0x7f0000000180)=[@exit_looper, @decrefs={0x40046307, 0x1}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x1, 0x5}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x2}], 0xad, 0x0, &(0x7f0000000200)="7334172187a0c3b17b450f04b07d5f12ce52596d28229565867c8bfac2b1ff19eb4a987b1a25059c48906ac4a989de9b56e0ce804030c035e82c3c41f6a0bef41e14b6380d60a4f6440a88d30d20624bbd59a2424ef3b759c2e8c5bd3ea2eb61b2f5a844f70c8fa9e49d433d336dee827be7337b0d37d21b1baf58c1ed847d864856ceed1defc4c0fbf764a1a9e17b5d89b92f70ccf4e3391f0e4217304fc02c2cf67b24e091468fa7f92de82d"}) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) (rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x941b, 0x1, 0x5}) (async) r2 = syz_open_pts(r0, 0x200000) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x80, 0x0, &(0x7f0000000180)=[@exit_looper, @decrefs={0x40046307, 0x1}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x1, 0x5}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x2}], 0xad, 0x0, &(0x7f0000000200)="7334172187a0c3b17b450f04b07d5f12ce52596d28229565867c8bfac2b1ff19eb4a987b1a25059c48906ac4a989de9b56e0ce804030c035e82c3c41f6a0bef41e14b6380d60a4f6440a88d30d20624bbd59a2424ef3b759c2e8c5bd3ea2eb61b2f5a844f70c8fa9e49d433d336dee827be7337b0d37d21b1baf58c1ed847d864856ceed1defc4c0fbf764a1a9e17b5d89b92f70ccf4e3391f0e4217304fc02c2cf67b24e091468fa7f92de82d"}) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x2, 0x10001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffff9, 0x4}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1010) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8008, 0x0}}, 0xfffffdef) 14:58:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x941b, 0x1, 0x5}) (async) r2 = syz_open_pts(r0, 0x200000) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x80, 0x0, &(0x7f0000000180)=[@exit_looper, @decrefs={0x40046307, 0x1}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x1, 0x5}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x2}], 0xad, 0x0, &(0x7f0000000200)="7334172187a0c3b17b450f04b07d5f12ce52596d28229565867c8bfac2b1ff19eb4a987b1a25059c48906ac4a989de9b56e0ce804030c035e82c3c41f6a0bef41e14b6380d60a4f6440a88d30d20624bbd59a2424ef3b759c2e8c5bd3ea2eb61b2f5a844f70c8fa9e49d433d336dee827be7337b0d37d21b1baf58c1ed847d864856ceed1defc4c0fbf764a1a9e17b5d89b92f70ccf4e3391f0e4217304fc02c2cf67b24e091468fa7f92de82d"}) (async, rerun: 64) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1010) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1010) (async) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x2, 0x10001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffff9, 0x4}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x2, 0x10001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffff9, 0x4}) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x2, 0x10001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xfffffff9, 0x4}) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x103480, 0x0) pipe(&(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x800) 14:58:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000000000000240036ff11ccee40e80ec6643cc8a7124eaf2446b77c2cfe5ddc739bf484f05df03b7eb7f52c14aae8c2e2cbc7839388f192f81968f804d8ebdee7b55b7d3da49250becd154d6e818442ef2735b0da7e962e056d51f83c02d64ee77fc650de0702a294c2c0e0cfd7dc63700a7f833096e78d75bf288c0a870dc67295622173bc85b8f35beadfc4fd740d33f49bcad75dafee0937e2cdff6b544068c4d25df080982b84dfc3b12be09efaf49e585f5e07518d599fcd55c5d0fd51b7de46b8370204929aeb4aa919367f874eb0a7548579135b4b468a217bc3c73d5a5258914be20dca4abfddffa62985a26cf0af4376bae3a095d379db9d6ed4fa865814143373d872921680d7fb66535d5627e2ca91be3ee682c9bbe86b26d077f829c1fe5a926dcd93eff645376caf0ea2834255cb32446912392888ac92a4df459fa5090812ddc5d082918914f578dc4c8234a36c27299495f471283d452f6d69992ada1e93f4a0e8b29eb8ac1c16082c0a7e488b42780e97af7bffaae4926a5e011afeb2d70c2f02202e3daa6cdc90edf90da774e6c48106a0af9704b5719c0d19fa371b2ff85e40126a3be0f10f43af9e63b2d16ac39ed8799b53a1d3d629230dd3111317744d8c00a859f378d3f8ff45da7877689ca2d141a4f6ed5318685f344559ee0ad3acc5e7b66d8237b8a8aa6c8b1280bc1a7e94eb954493e5d7866674093e745786be788ff45336295368b068d8b17ba568cacf97743cff53784526b33489c91efd233aeb4a350a88876f09efb524fe6e90f111a7ae9029e378b2ace26df3ddd97fb763c96ac660dd9302d72aeca20154e90a9970e75dbaefb28b2688de6b1e0a635f94a6c060682553f6d2a561d1ec6c4318e6a02fcab709f88aa3208f6ea67b7ef6c58cdc8faa92a675352684ad87a36904486b183216954bc44549764b4c0637824e1bed1d1889f761c343c9d4b5b15efdcc920ba63db63ff7c276ee41b9d30c5760995a6a2b7d374733a39003a8fba4e90cb58db3e0003e458d62674d34fd2190fdbb2068f461614c5dfaff1db69df8dde4a7b5b6d9d777206d7d007c71e8df0fff74810d9219e89e5e579dc12432e0cb25bfd36846c6e4df5d45e5b923347b0a46f62010b4803703b619408d737fdac7f6cd08b902dc7a496ac50dc6f8d1c6e2c2618000070c39dbb0eea654baae86e4a25c26e3adc079158adda5073535d8195aec3f1f15d9c67b201947e2c40d4d09b20853702a5cf1e5294f8f2c86399c4c1f93a4bc645a3ad608dde5663766189a0de6765aa0eae4912fee1588214f72ec15da308cc064693a86d9f52d278e7298467aece373759bcc77bf432b6248f661faee1de768aa5146b06a4ab7c354bf6c0241be798431e1a407db99054fbde796484da143dbb42aa70a3bf3371fbd912c3e9b0adb34f97e2730ad53241da6ec6e6557321b4daefc39ef4fe296a7e91a27bfd12f9be656b7c118f9ab3f95fa5b04d9f8d0e780ba1371e0069fd832f62c7a50206f987851220944035d39f116df3749129e477be5b85a102de18ce839fc3b27f6c4d6893f3020328ffeb17a704e4e7301bc218bcdc746323a3a9235ec59ac9b9a3b347ff1a47e30db31889d8981339ebac57da49513955647363c5373bde6911c8f27802cd1748599b40da9a63bd4b8a22af44b4b7eb76e0f4aaf18c47d7ad9543320a2485a99b47566b4514a16017c31e0aa6e03ab6e37af1cda19992025e60aeed6d52f73371fac50b63ec8075cc00a54abc338e6df3502c1bcde628c91af65f40227a731e36b4498f6331dbccdfb29e744b97213226d09cd6b81d675b5e756e26c7ccd431dca6bad15c7c1b12f2be8ccabacc8cbfbf6204ce7e0dd9ead12e96ef3ae175a7364d6bccc428ea76afc79e224a420276db97fd9703cbaddb76ea4959ae120c564c3058e42d84534fb59dd94bdb46ee6e6d60c6675d2e8ee19ca061aa5c0e9256408576c1a5e5aab2c15e1602014dd378a38540fac93e480a243533bfd805aaf5323c9c611044941c5a094f90970eaf2de3a7e6b7aef6b07bbd5bfaf63d0fc39240c28bed094bb20a35e8615ad352c2500a1eaab3fceac365621910ba7258f1cf251fbbd6ae4cca173951067e0bcfe7f0263a5e5ed025e5cab1824648e82cc15cc456c68d957ec4903ec504fd9945795466c8c930ae248f7ed59bc8d517f3f4c085095984004c85161995acc7e39f38d87492db4a377c2afce1793921ef25d3316b2ba750b53e21e5c27971a5098b5f3f478b494a4638adc49add72d0dccae5b1aa5d93d6a9c7b56e793a39d14c211cd1888e06c8cb03d9c6617a68c90f6a4bec97c7ef5809d91b91eb4b15cd166d9e3d1a39d51c71e37537c14959c7491f4e3d6626a4a3c26e305ef3abca45d06c5b5c0810455ae4b008568bb646b8348a10b256d382fe5eb3eb97bbc92e13a3198436c5f46bbf3bced68bb3e9aba949edaab55dbd27248c84fe0d511e60faf3d3924723a873810dda1b333902437e80c8d72049b18b38e933d33144e4319afda008383db8f1c819dd46722572070f121eef14abcd341e554f94a731e3a66fc542aae83b86c6fb1d925ed376c8731a1adac2bad3399e3f26c7f1e70d86b3f5656d93c68197476536ee074cdc21b9a42f8c9995e3911aac7c12058d872941ce680dfd1c9247244bf4112313d3e750f19e2052f988435f6344d616cc84fe3513959c29fb5e9c966d55e3b3fcc0723a40be9c14c47a8606a9456c6a250f5f6ba4094b8619c563cdb87f6049b7494d057867ecb2978c510462ef47ffcde46502120f22e87e231d4ae01cdda578481d637a12356fc4bc3cb61194e671a7d9d9fbacf71d664e4a9eb7e062d48f124284ce3900aec8d473c01993c5a1f6653c8892ea8d2ff6bad820693a3fa9bf908d4fda7eaac14258fac9960b03dbe78c5a86ccda51e47ef933467120f918b4f6b0529e28c8b701dff7f75d6547e7a988347d467eda02cae8f531987e651c82a36943cfac2226ca582d5824dcd40b7e4611e11f52e9a8e1006ebcc1c8c10b90db294ffe59c26cce8215ebcb249879274ca980bf3480d6f8c78c538d96df6fd30835ce10243968cd9526f5fd5bab87c98666322743dc1dcb5c5fb3c05ce1f330f4f28220487eff0d3067693a778034cec2e1731e51a984ce3b259319cf66b90e61384d3e118c4b0f8046026554b9386f80c35dea89d7a0628a0e915938050a1e32e1339134bc355acc74ef427a5e932382ce0cda9ea55bfac0e4b92b0e43ddf8822b7330c7649dd24d9e6b1ec7fe1b417b69bb537d882ef8084d5688c1c9ea57ab66063016c7fca9dca65a7b0da5f7161605215d91fc5afe35787b885b4f531ae29a77fbc747b13314aa706a71b2384dd7979aeecd5c2a5f08112f103eba1a7da3b818e03161d8cd9ccd92cb171865a2d2becfafb39c6d450a08ece6e8b6e74cae052caaca1f5381dc012a92a45ec146d08ef9b37591dd3f5f2c6e5b2449b2d495a82fe646c065a3beed7a504c7ee770b81e444098466c1b9f879bb52e88a348a2aa4274bc71fc8e568e84f66ea58d85835f7d60c3adb6465e2cec7fcb386d252002fdaea925fc74ed00153a9ea46f3f1d925ce7aa80425f203032a7c1eaa84a7ccfd385328b57f38721e91c0a46439bece72d953fea5d1bf55ae94b3b9593938998dd2565b2f7e3b444f3781db84b92317561a327242e3ae46b5e4addd2251958aac36a5e30b52f61f5820f5e0d35c8476b2d5278f73e6c0b3513ba9a2b71d8db176209899e9e8349d1a72a240aa1a6d83a74f33215d0c1f0d33eb3c43fcd5c63255cf8787aae3d4d0156522ec0607f712b5b9b74dcea4c770d99a8f7b0e174b0245ea5d59c5c256ca7414b3f3fb7f8e676b772cfffb166026bbf3321580fb299f81cae030514ee217b42b04d97bfefe233598705837ac40aba0c1bd5ce8895bb417f91aa3c7b4b7d441a381b52f1e39b622a317ab6f158d490d0621c81d56421afb29556a98d82b6897aaa27f6b96b3befee252eb74993191a4bb882c354b4c43a154f118af9dd5207c03df474052456e783570d162571f2459e3b7d27c68e737516a66f6c8efaafd3bdd8a97105b7e76575621fba3b86142b1090532bf5b7e3ca9bf4c716c97c0a6653dbb8b56ced32866aef91a89696c0a05a78f41e624d0cde7a9bbb3ebfad785b5e4c59cb45e3619482eee4c368e3b5c889b1a181db4309f91722e3260ffef6f7681b5b300eb90c4b032bf20ffb64368bb7800559ad6ba10f66e8d4a8bd4e23a536d64b86fad27169a7d03a705a2ef71e623b7724e46de51ede2396591546c5354cb07aa7156924b504f523777bca77ebaf4e71ce27979bbb487101d06aa0464ef12cd104028d7265f05aebc2b51d0a423e9932cb3f5c057e649a972b35a0119e10aa6e1048d814319ae8ecc7d157fa3e878b7661a9352754862c7cf99b028207803cdfec56e410d05cc126b1bbaf2ae27b8fb341cb7277bafab7ed67adb2a80d472ad6a6b7e2af115fdbef1422ced6e3b19f714c48f6760fbbd0a2899c4adbc41878214fa093c26e71a1bfe979a418d6a63c1e8ed4ae8e24fed12fa9f2dad937c7e7bee74a22ae375b901a21921b340ab20236dd08d9c07e548cba80833545edb5eb9aa6f0759625f2a90eb56aae2162590b0618e35e07de52104ae8ad97304d6090fbd794558940aa52f080a59c446ede44715c2bc58d735aea918f9cd861c936ee7e39b70e1e432e1860b3467d1bf5722274d0b69c859f03f35000b0e6985d027c30f2ab219f6f056a2e01ef405a1db9e668f6a6042983d3452558134eac147692ee785534a7518600d36e526fa352799cceb5408883d365a37ab4346238959c93766cacf76255d0197f370ab6ccf3b5c9ee2b6b8c1cc4506166e8e184d69721b6138670afddf966c8f6c80b9e807a0f959ff7ce2438e914d10e4ed42977d6af4fad2436cc1403870e9b5b2006f5f9c82b03b4af2ded4a3c12a6e3ad9c7197e66ab7a3ba4b603b6df635412753d59056ba09fcf40d4400b1bdd7ce62d2f97faeb2c65bfc44f28acd46d3b3cc535fce5ea0639d89008f9c93bc7a397470152810909f4cfa8ce3d36429493c381b95680d853c02b12e017a1242dbbda96fb337f62d6f4e73aa2fa7f50a8879a1255090307d92abc33358b48596de348d7e5fcab93e88f6bc91128b3a4b52e861061fe0efffd297e14e1e98bea47f4aa0c132c2fe742e51762fd14eb4673edf5eb5c8b275c6e06734b4d72c54dd9e23da37037fcdb7bd4d394830ebc35e22a817bcbba7f46415e3c281da8d9610a6df71e6dbeef465ba3b92b9ee0f0bf35662916896be770ebb7476390dd8043d24aed1cb974e4f3d261b36c9b27480233767b7009a204b1c0c007fc18c0317fe0887f9aa90c67bb5a2719751628ba99fabcd31ab0a8a69f16bece0d68ea59b27a1adf96cf9c8d5aa308dbf1b1bc3a745beb1068d59d5a6652d59dd7dc229c12a14d3e328813b8e002e3ab82bcc22ec8b4dd1c69ccdbb16583dba3721416fe5659b8451358ad9d0eac0832c68cf9d2363db4f80b943ed3e14191a76596984446139c11228142e341e08334b27bb2a9e20c6e42b576db85202778e52271679abc6e37fc209d768217b311e792405214a0ec4071a803b3d0390fcd2a54c86dcf039f101107ce162f97a64f95214f17de00fbd7594c27f6fc26a1924ffd72c16a4a896dcdf4e60090447282abb80ffdacbca0702ca3d47a4129fae8d04285e891bb1e94aee27a07829b1e4f2c88b501c7d1783a88fc7cea9bf8096a0b0771301cce7616cb79d5b8db07664c0c8ba01046b529af4c1a7ca17d41ec0e735d53c4fbe06092afec5a28b2e1d5fbfa5d1547ddd6113a76a3ccdad9d9d61dcb78021a36010b9515c91dd6d69ee7053de9f63d5c140eb2881cf0b74344084a5229a17d5b416f441c1e88ac"], 0x1010) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x0, 0xb64f, 0x8, 0x8001, 0x1, "c74a90f1977387a8f6e9a565895b6747eee6fa", 0x1f, 0x1}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000005c0)={0x132, 0x20, &(0x7f00000001c0)}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8000000000000001) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xcd, 0x40000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/152) 14:58:47 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf67e3, 0x0}}, 0xfffffdef) 14:58:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xff, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 5: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/165) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/183) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10000, @mcast1, 0x2}, 0x1c, 0x0}, 0x4008051) 14:58:47 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x103480, 0x0) pipe(&(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x103480, 0x0) (async) pipe(&(0x7f0000000180)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) (async) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x800) (async) 14:58:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x0, 0xb64f, 0x8, 0x8001, 0x1, "c74a90f1977387a8f6e9a565895b6747eee6fa", 0x1f, 0x1}) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x0, 0xb64f, 0x8, 0x8001, 0x1, "c74a90f1977387a8f6e9a565895b6747eee6fa", 0x1f, 0x1}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000005c0)={0x132, 0x20, &(0x7f00000001c0)}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8000000000000001) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xcd, 0x40000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/152) (async) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/152) 14:58:47 executing program 5: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/165) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/183) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10000, @mcast1, 0x2}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10000, @mcast1, 0x2}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xff, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x103480, 0x0) pipe(&(0x7f0000000180)) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x800) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x0, 0xb64f, 0x8, 0x8001, 0x1, "c74a90f1977387a8f6e9a565895b6747eee6fa", 0x1f, 0x1}) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000005c0)={0x132, 0x20, &(0x7f00000001c0)}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 32) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8000000000000001) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xcd, 0x40000) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000080)=""/152) 14:58:48 executing program 5: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/165) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/183) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x10000, @mcast1, 0x2}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100000, 0x0}}, 0xfffffdef) 14:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xff, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000180)) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x5, 0x7, 0xe074, 0x0, 0x5, 0x45c2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x460000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000280)=""/25) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000002c0)={0x4, 0x2, 0x0, 0x4, 0x9, 0x9}) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000005c0)=""/4096) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000100)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x540b, 0x0) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/213) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_open_pts(r2, 0x28c00) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x5, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000180)) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x5, 0x7, 0xe074, 0x0, 0x5, 0x45c2}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x460000, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000280)=""/25) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000002c0)={0x4, 0x2, 0x0, 0x4, 0x9, 0x9}) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000005c0)=""/4096) (async) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000100)) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000140)) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/213) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) syz_open_pts(r2, 0x28c00) (async) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x5, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) (async) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async, rerun: 64) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (rerun: 64) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_pts(r1, 0x200) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x101, 0x8009}) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, &(0x7f0000000240)=0x14) (async) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000180)) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x5, 0x7, 0xe074, 0x0, 0x5, 0x45c2}) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x460000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000280)=""/25) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000002c0)={0x4, 0x2, 0x0, 0x4, 0x9, 0x9}) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000005c0)=""/4096) (async) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000100)) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000140)) ioctl$TCFLSH(r1, 0x540b, 0x0) 14:58:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1000000, 0x0}}, 0xfffffdef) 14:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_pts(r1, 0x200) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x101, 0x8009}) 14:58:48 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/213) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/213) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_open_pts(r2, 0x28c00) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000240)={0x5, 0x8}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) (async) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000004, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000004, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/121) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_pts(r1, 0x200) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x0, 0x101, 0x8009}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0xfffa, 0x7}, {{0x0, 0x2710}, 0xa, 0x100, 0x6}, {{}, 0x3, 0x8, 0xac9}, {{0x77359400}, 0x2, 0x8001, 0x8}], 0x60) 14:58:48 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000000, 0x0}}, 0xfffffdef) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 64) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/121) (rerun: 64) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000004, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0xfffa, 0x7}, {{0x0, 0x2710}, 0xa, 0x100, 0x6}, {{}, 0x3, 0x8, 0xac9}, {{0x77359400}, 0x2, 0x8001, 0x8}], 0x60) 14:58:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200080) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/183) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000200)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000001c0)={0xffffffff, 0x10000, 0x1d, 0x1, 0x54, 0x1}) 14:58:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 14:58:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200080) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/183) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000200)=0x1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000001c0)={0xffffffff, 0x10000, 0x1d, 0x1, 0x54, 0x1}) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 64) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/121) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x2, 0xfffa, 0x7}, {{0x0, 0x2710}, 0xa, 0x100, 0x6}, {{}, 0x3, 0x8, 0xac9}, {{0x77359400}, 0x2, 0x8001, 0x8}], 0x60) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:58:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2040000, 0x0}}, 0xfffffdef) 14:58:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffc, @remote}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000000000000000) 14:58:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200080) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/183) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000200)=0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000001c0)={0xffffffff, 0x10000, 0x1d, 0x1, 0x54, 0x1}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200080) (async) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/183) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000200)=0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) (async) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f00000001c0)={0xffffffff, 0x10000, 0x1d, 0x1, 0x54, 0x1}) (async) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffc, @remote}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/176) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x5, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000000000000000) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x5, 0x4, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3a715d197df"}) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/176) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x5, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x5, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffc, @remote}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffc, @remote}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000000, 0x0}}, 0xfffffdef) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x5, 0x4, 0x2}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3a715d197df"}) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/176) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x5, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) (async, rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2000000000000000) (rerun: 64) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 14:58:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:48 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x5, 0x4, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3a715d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x5, 0x4, 0x2}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3a715d197df"}) (async) 14:58:48 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5000000, 0x0}}, 0xfffffdef) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:49 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000000)=""/251, &(0x7f0000000100)=0xfb) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 14:58:49 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:49 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 14:58:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/234) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) 14:58:49 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/234) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6000000, 0x0}}, 0xfffffdef) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x1, 0x0, 0x8}) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x24d, 0x7666, 0x4, 0x9, 0x1, "9b146517a344e8e2427fe586572e23db0bcafe", 0x20, 0xffff}) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x1}) 14:58:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/234) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x1, 0x0, 0x8}) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x24d, 0x7666, 0x4, 0x9, 0x1, "9b146517a344e8e2427fe586572e23db0bcafe", 0x20, 0xffff}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x24d, 0x7666, 0x4, 0x9, 0x1, "9b146517a344e8e2427fe586572e23db0bcafe", 0x20, 0xffff}) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x1}) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001680)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="dd1e194d4a5e661590e829be024bb55c822240", 0x13}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="a51189020d19486b31cc832b6614a6d8785a94e05b2f6396db9112a6f488fa7cd794b60cfa3dfa59c3d499c8f1b6237e00ec2f10616514018945b11cfd8ffd236c6d646fa0431e582dedb5c65658cd71fb822d1d05aaaf28b403397b5ca39f1e99a92711fa9f04f5317e3d5f595470503c6c1be04ce4724676120378bf258f32c7cf82bce313bd692246c1d3d7508da8882e3a9213", 0x95}, {&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="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", 0xfb}, {&(0x7f00000004c0)="a39040b6b76e3ea1a7412af4dcf1cf762f971958f46bf03aa2cb3aa145ad80ffb8bfc70a28baaf14d34a6533275787292c596049a1512950d82799102d6bf18bd7d4c1b98949075099073af0a9c51aa7d908e8b7104865b11e6d950e7a8a9a3db9af289ac5c44c22b4e7800c8f0d4c69fb993e811df7c75389e28b4bd95d57844854f0b91359d4364ce07b0a36e4211f770f08837d47ddc280cda73a5d1286a10f4adcf006cc224fee4c92750b2d9ced7538eb7941fba596d4dad041e2fd9da401", 0xc1}], 0x6}, 0x40) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x1}) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6040000, 0x0}}, 0xfffffdef) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x300, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x1, 0x0, 0x8}) 14:58:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001680)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="dd1e194d4a5e661590e829be024bb55c822240", 0x13}, {&(0x7f0000000680)="582a73d73d6c56acc7bbd64ebb9c775a7e66944b3d7dc2c20797114ca8e3d1c924f11405212e1575a25fd906ccc850ae5fe211e8772e9e1317e6ff547e9493045cf894674971b98004b517ee6f2109332e652f6821f3e3c1d8bcece36c46d3ead6af07cb9cc0890c249a64f7a567700bfd27b0e1fa7995c0d1c7eba0f992727312c2b8af1b90c7a1fc5a3c556d0cc43649ace922577bf7c6d9c8352d0e048e3b8ca9cec5f0bb2d15adee63b61a8bb909e3ee2240a990c0f77f12e6ff27186e7b003c81bbf5b021822bdf923b98ae5f6bd2ef4f4417d7363fc46b299755b1c94fe14fbbf9deb1427a53b4ebb6f544b8f79a282120c003a7050ffd28a5776981d7b7dc93bfde9cad2337fb2ece32338e4bef144ab646d60af9689a39b84e5620de0a489b08cefaba52d7b7a4a10a72bc503486ebfaced12091df04dec8a3da4b411f38b823294ad2ec2cc04067bb1678c8465b4a424b060fbaeee2100c94d4323f0c2d3d66753945bca8f742d3c111cb8969e9bdeecf8f5b0ed988389f01e45909f7979efe909a86f62c429d28a7f72d50f798f154361e043a3df6e24657f864811ee189619dc761b37808f304571ccf0f3b3ad3d2d9a633fa0c54ffffa5e283c5f8892b4ecbba93eca4b65b4f0b3db113b9ce06ca568ab47bded34cd6666a965f39bcf2fedda58247340f67dea61ef6c1b207c0d60851e89d92a682dc7aca07755ccacf861697b2dcfb530cda2b8372191d8f54a2c729bfe3a52d2dfeffd2ba121746414ddad6adebb6395b4d880ce40b86b3622c6d0a5a955805c1ef44753449cc10b36f45939044a4bd22f815ee38b156af20e1e12c968849aee28184f203d1f3ba3387aea2b2d676c430cca90c2fb0a5a0797ae338fc4d53ba43ebb693daf07a7eefde1de505fe6eb28e04675193b8eb087f152d2ead9edd2c961cbd3bfb89488bff3ac6f09f09ef55e55167602c92e64e4aaa5480893a6f65eb5f4b2a07a6be43066f9363b35794714ba46615ee81eda86b26c8617a65b3905655e17eb1c4d5717e215a1e2cb0d61b28bae22aa1e00b23de4a7ad46c5c0f6a3d76e33559826b80cdb0913666958cf65c9c6833d4ea637f0a7816d78f32efe25333f29aff72569f4b4a53e8aceac23869c5ad5e3e8c01668b582410167156dfd1b0ff525cc65b42ac40deaf85ae4a43bcb633fd6ccf72ee317373ed98a042cd639a6297c5ef8eea6fff7e8f4fce84787d15b4133ef2e63e71795db89b1a70b07d7f23c9ea39f940a947759e8ad404f85b4d5e72e30e766678bdb03e76e5034d7a32deb392b3f1a42ca960001bda5e1d945132350442e493ce4a40d5ab8deb006179269a9f38c023b4bfe49a3d3232b238ad7117b4718f7b32d6ffef728cdfcd104c89bf1fe5188ba7fbc14f57a7a751b9fe4c0ecea85dc6c6b4405e5869a7b8617fb247abbfc195847b11dc87e464026e9492b24495bd3e53a657c53073e98bf6027eebf9cc748fcdd632aac434e84a315f71a4adb8415c69a2d507638bbe0f0ecf3043be7849f36568fea7584b81bebe77cff5140ecd1b18b591c64d1754cc1f36813b72c9994275470b26c993f44ea78f1dd4b1e27fe38d36283d73f5fbb1777ce86f255539278b4b500aa35254cbfd058c07d571ed5b6d1651d034e2dac6e8a0c393bcb01f2ad5bd5040831ba3254590211764e96312860dd5f7886589419e18443607f8fd181a7cecf3ab21521ccc0a85554b45d9399e98f7e0e791ec759dee404c072fef7f5a50bb04ede03e6ed2789e1c770bee98a0d52a6fed34d33d6d7639489817345d018ca4df6748be8c0ac9e0dfd9910e0b3fd9fc9a16f7495062babf9a5803d9c4aee6090a1dc5e435305c186c6de675dfb69638ad0f77c43f9f13dd2269832abf7ec3c001b83aa6e6c9f1fad224c99b283ddf3d6a0367b5bf34a1ac28787f8f9bccaaebf85bd90eb168886a5626d648a4bb8c1e9b58b87647829a291c470781ca2de01fd528352d657724db26fc26bcc480b05c677cfa32267cfd58e9cd30b39a9b4bc6d67e7e26967d1b9d30622f9e509e49abe8e1c5e906c0a727e606f3d3d211049d25c50cdd0657532b8228ed366e917835880e1cd2cf9cf0d4708f44868280143782b5ec8a47c3fc61245a7e95673c0a8e32e9f02db9a1b12b31d068af1a4101d546494c52678fa0ac3e8b7daa02a742624f6c5248200630637f189ab5c2cb23733acc48a982fdd3d1740be87f0b9aadd67c96fd92f582b91b375285711ddb77e59054b7c97e3dec22accbc64af174bf21196a5ff207667c39a591e65f1fa34fbbc54f676a2454c754f1be36bde342236f1c6b456504b3e77363229a65167aed36e2d04103a7a6f33fd7d58964eb6c02e88260e6453c34a868999e451a212d7e58b4b2fdb9f19d4bf36cf89b4bcb4f2d1113eed24b46cdfe5610fafb711397aa6f747cd5149095dd7cd8c986d660093a42101ac1be55833fc351d76115c2b9e183d9db62e7d0d528f7a9e17ca0f399d2e46b658fb272e7878f1ed479a86b258d4b114d8c167349c2c8901a337a352817f85eabd28ef180d4d6b3368895c57f94350e71bf6f152b8b86afc5f2d3535ac3045bcbb9be47703e1fd9a3fa67d95b56b2c45cd56c646d21d69343401d12f205e7d3c527f437f47734bac3ff234c7e189e886129ebfcd0465c12379ff19ff9a0ead2bc99b8ccde1361adf497fa6cca4b2e8de14f7b9561cc54e049977a1bacb29a465a9481a2bb8316a85b0048e3ae2c04a0bd06cd0f2e2e7a8c633a6d58016ae95b1b68bded924a746beb873717753b256dedfd84b3ce37557de6429f2c9fb645c72df21c972bbffac4e04a500441280f6b46482636795e65bf78932695731549ffd40d8864cd2d12c5d995163b3f60a962ea8b252f8d85b7f24d73c947b4d0752dd73693d61a71a9cf84ee068c3ac63dbd6b89d9e545ac56ffa16df6263db41d432a448e0b05fffc15f44b7554689145b94755008244d2627a583962a3e4ea889bb48a8e0d159952a6fcf25b5f13c84c3020178e84d7a1b6c0386e02cb8ee1680bdba94af22d34c675acec62bdc36cdab71a661bb5a0b0886d9574a39519a0c8c48a7345fd4e7c03a666bbb555939243eefd2312be8edd30e16ea6f1bca2cf456e00af0e338c67d40c72c35a11a8bc3039c3868c11b5e73b33a2a96b793be55790b25202389b429b77174b591a1ad6991509309ac28a6a96cf4d4435bc072aab6f528c845bdee2f8040493b55314cbcafbfd8dff26b0c09a0a61256065685174983435d1f32ee495b2edbf8761f12345f102ecc729b4974a72555a4f0fc67dd6577f29de5c2408fd2e60b630b008c08df9a612146434fda9de92943f0e274cfdaa49fac8e709d3f137f400a4873030fbd628cbfdd8d0dd2a6cd9772884760c26f803ae090f58ae55ec48cd338160c4efdaca4bbe757db3e38c678040bd80c7c7a670d8ae8cf4c08a2c67fc4effeccb64249af6d7b21e250f47e783cea75b7a660816f25b0736c398f4e092f270d54158a798ecacdf7ae8790bac646253b2938eedd27b526b25179430ca9d1535c5697239e02de76304ef23e50f916706cdb51cf4aa8ad35546a013f1d09627e4e90bca68761f9bb28a596f5c3e71ebb6befd26e663ba7b9270252c8692983cd6a18ebe6195b9e99f2b83617bf58dec261737eb73e41f83f3e8ae5b2abda55f9038d6e91d9fa56058bb8ac775c2874ca3c651bf61072f77e29146c38273a8d07e6fd0aee7356f29556cc1c53eaabe485958a65dd30cbba217497aacae5bdf03634ab3ca9281dd934fbbaeadf65a3ff470357e071a1f5957c4747ac9d8d7dcd5a84fc6810ffc715bf25e573be265caa033e9756719ae2904ed4c71cb0b3943e3e270a7aa861fa57632a8ec83d062e25d81513e4c3450e2ded914415d26f80e2225bf8d4aa953ed31f31bad8429a46d322fd58d2dfcac252b36e0089689a1c4e7fa9910a41a17bd49613377828298c253cab42f7aca18855327195e65e21f98839473ef36ea6cf0cb3079ac58cf2ffd1177bbf91e71b498f184e2c6fb79c64ea807fdb14df4a47ee20e5d7e7ea96ff36267bae3453ba924003e3bb48fcc0977db606e904dbcee065527a32b5125a8d30e39cfe369e31c0762583a0273b3fe3120397c9e9860bfd4e457af94ec0208aaefcae1210b49bb6039b857b9dd0ead8af0fd31c277ae2d34bd8bc11e585b6c16ebfcf44c70ca09c45964c64f8e2fe30a52d163e54b90e5ac01d5ca76dda58362c759ee979fae3529b4cee1fed9cb9e9663bd454119177f0f575b8cf8cdc4a739cca3ed8733bb82027925b4a6daec26f36d1ffb3ab1c8f384d84a5bf04f7e0d6f6c4274ff18ba0c72c57f24cb6b62148a32290b0cd612b6c465ce10936a124781ec352702dc0965bf5bf0470ddc226c4533d6e02e32ff9e9cfbf57405ac0a0a2d5476bd19a5f87e77d429af71704f3f97d74b73854cbc5b45d68b98aa10cd3ef42e9a5e9476b1776a98c64dd0b1e3bee4aaafc78e44ff9c05a78edc9c7d6841eb58377168117c7f43c7cc060abeaaa7683b27a0ca3eabee1bb9f5431f2f9f96f92db64ff1247edda4164fd284a1cb043d955acda334a639331ac6268c8e39ee2b63ab78c1b8584b87c44b4f7724388586c5110db829218bc878707d8ff4340b9207993b4d5b3871d6d3ccd655d0a4a07de11b696e97302cddf5d87def883fb6c7265694635360f1f77124bb27fc88c1f052ddea1e86386082a56e6ca89ccd45710b8468584127f5949d790f6dba632169a7acc272ab2ff697b2779ecc3781909f7508640e2bdf25cad2dbfd0b8e4dcff228ee876133bdb5c7d907a031f3081192618b7bed506442ae6cf0eafe8c3066c189a289947ee3a1429b1172a59fe1e1cf5c66a9e6fff9978d8a8955d71544b7eaf355e9be5cb6fb6151254b85b32d9d09cff50ae606e8cfef5af4a9d2eb381771599b479cae138433ccba7b24a9499f1277653d378650ae9c8c55c899408d6b0e65e0491121782c30df73df3b792de37450a7331901e581c581d0295a9ea1befb90385cb3fb886c2f6294ea2eb13dbb8c7ad667da39a1f58541bc280c1f6c4a0999893bdff3380cf3cd3c9b99cc7feb884a407489cdbb611550876c46733a63a92f51c58170c0364cf02a71dd32619ced0c9433f62d2e3270bc671d78b85e75fdbe704215d71e64fd142ecb4c899cbd3c349ced9f1c40307b47fed30b93079344bc6d9852000728a77c7c835410d4b152f6b0a4659de4a2fc33e21f4fc80c2714a63d94dbe59e959283fe8f01e220720c60b06f8eb6db2dd08b0096bcd4f3c57555437b56a3612da67af29fba9f2a2d460bb730be4d257d1df9198a2d07672d49c23ef382362356552a68f145028179c446d6485b8da1bbf4fde57e9ee521961e9bf17272c5f0003bbac4ef58fa349aecb2df298031d82d837f35198bfab57a51e647799b8073d50f4c6849b7460e97aeb4124bf4373fc0d03f1cb4bfd25105b19a58f99dab5884da85ce16617a7fcc6a426b9e20bae1970a19c7804182d3df7e097603cb265a0b28493a56a6b86f259b5453d49676c816d622d056c7d54a8c0f191ebb73d87cc2d5e9b4a66fd9d9799fc824c5d979f59bc5208cea3db8313e58ffb9225095947b5573d2af56d158ab9c1d0b4cc0bb0b68686e800a1e4fb1129afae711a34b6ca306d72b318ac4e5862600d130cbbbe50f9a9664f12cea06ebb6e8954cafa1ee68182e6cbf2a0fe9378ab06b25f27bcdb0e1df7f3f0689b96b6c", 0x1000}, {&(0x7f0000000200)="a51189020d19486b31cc832b6614a6d8785a94e05b2f6396db9112a6f488fa7cd794b60cfa3dfa59c3d499c8f1b6237e00ec2f10616514018945b11cfd8ffd236c6d646fa0431e582dedb5c65658cd71fb822d1d05aaaf28b403397b5ca39f1e99a92711fa9f04f5317e3d5f595470503c6c1be04ce4724676120378bf258f32c7cf82bce313bd692246c1d3d7508da8882e3a9213", 0x95}, {&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="00c77d3b744c726d2f4a2b53e1b21417e173b7759976a7c5148eae601732ba5c5470d3ebf07fd328c0f0fed5aa8af04f72123703d7dae1aabde1f697ebf5f52b4eed01a3dd471c0765f15b5faba652d29fab1a0f9f0bf7f26659739c266ea9ac18005872333ef5589c89de8f7f10985e6eaaa58de0e2d31be913050216f978ceb5e98dd0d33996c0b32f2e0ab9244531b9403aca25abb8f952da5bb860e922d1bf3ffb083df1744246f76959b8652a0272d3f3374a628c94f6559c2182d42465bb0a5de3be772b9193697d6a3a103672b5f0f389c17ae9e707204299cbccde983c607599368f92af27b8a4b4067ed0e88b897b648aafeb44691fce", 0xfb}, {&(0x7f00000004c0)="a39040b6b76e3ea1a7412af4dcf1cf762f971958f46bf03aa2cb3aa145ad80ffb8bfc70a28baaf14d34a6533275787292c596049a1512950d82799102d6bf18bd7d4c1b98949075099073af0a9c51aa7d908e8b7104865b11e6d950e7a8a9a3db9af289ac5c44c22b4e7800c8f0d4c69fb993e811df7c75389e28b4bd95d57844854f0b91359d4364ce07b0a36e4211f770f08837d47ddc280cda73a5d1286a10f4adcf006cc224fee4c92750b2d9ced7538eb7941fba596d4dad041e2fd9da401", 0xc1}], 0x6}, 0x40) (async) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="dd1e194d4a5e661590e829be024bb55c822240", 0x13}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="a51189020d19486b31cc832b6614a6d8785a94e05b2f6396db9112a6f488fa7cd794b60cfa3dfa59c3d499c8f1b6237e00ec2f10616514018945b11cfd8ffd236c6d646fa0431e582dedb5c65658cd71fb822d1d05aaaf28b403397b5ca39f1e99a92711fa9f04f5317e3d5f595470503c6c1be04ce4724676120378bf258f32c7cf82bce313bd692246c1d3d7508da8882e3a9213", 0x95}, {&(0x7f00000002c0)="1aa93c82a9f08da5359ab0428cf091691c9f541f4aed33af507ec70538bc914b68b446566a0d602023df1f087d9639cd93ba0cee4736e7872ee37ce8eb05ab36c591582a4293992331d2e38c8c161ab901009c59e2668dfaea9443eb9cfb4ebc873636fddec745470b90105f34df6e812227fcc5cc1d8abe4c803e598e0eb0053f2591f881a98ffd7bd9883b5a4ecf1e3605be59b1abb9b8cafd11d30514c828612b02e38b30a9a6b52343853bca5659040bbe7663d3d858b10d29586c85c1bc3e4e83d36148ca3f37eb8368d8ca990823e99d262d3ccc205072d6aa902fb88ff0e7f98e45a0ce0cd1b0412b2cb42d298c84a9b12cd170846a06", 0xfa}, {&(0x7f00000003c0)="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", 0xfb}, {&(0x7f00000004c0)="a39040b6b76e3ea1a7412af4dcf1cf762f971958f46bf03aa2cb3aa145ad80ffb8bfc70a28baaf14d34a6533275787292c596049a1512950d82799102d6bf18bd7d4c1b98949075099073af0a9c51aa7d908e8b7104865b11e6d950e7a8a9a3db9af289ac5c44c22b4e7800c8f0d4c69fb993e811df7c75389e28b4bd95d57844854f0b91359d4364ce07b0a36e4211f770f08837d47ddc280cda73a5d1286a10f4adcf006cc224fee4c92750b2d9ced7538eb7941fba596d4dad041e2fd9da401", 0xc1}], 0x6}, 0x40) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x24d, 0x7666, 0x4, 0x9, 0x1, "9b146517a344e8e2427fe586572e23db0bcafe", 0x20, 0xffff}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x24d, 0x7666, 0x4, 0x9, 0x1, "9b146517a344e8e2427fe586572e23db0bcafe", 0x20, 0xffff}) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x2000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x5, 0x1b, 0x8, 0x2, 0x17, "4cc13f02b1b1d35c"}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x7, 0xfffff000, 0x9b, "3f494967dfe4ec295e06120f6915d21ba51b93", 0x7a, 0xfffffffe}) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x2000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001680)) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="dd1e194d4a5e661590e829be024bb55c822240", 0x13}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="a51189020d19486b31cc832b6614a6d8785a94e05b2f6396db9112a6f488fa7cd794b60cfa3dfa59c3d499c8f1b6237e00ec2f10616514018945b11cfd8ffd236c6d646fa0431e582dedb5c65658cd71fb822d1d05aaaf28b403397b5ca39f1e99a92711fa9f04f5317e3d5f595470503c6c1be04ce4724676120378bf258f32c7cf82bce313bd692246c1d3d7508da8882e3a9213", 0x95}, {&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="00c77d3b744c726d2f4a2b53e1b21417e173b7759976a7c5148eae601732ba5c5470d3ebf07fd328c0f0fed5aa8af04f72123703d7dae1aabde1f697ebf5f52b4eed01a3dd471c0765f15b5faba652d29fab1a0f9f0bf7f26659739c266ea9ac18005872333ef5589c89de8f7f10985e6eaaa58de0e2d31be913050216f978ceb5e98dd0d33996c0b32f2e0ab9244531b9403aca25abb8f952da5bb860e922d1bf3ffb083df1744246f76959b8652a0272d3f3374a628c94f6559c2182d42465bb0a5de3be772b9193697d6a3a103672b5f0f389c17ae9e707204299cbccde983c607599368f92af27b8a4b4067ed0e88b897b648aafeb44691fce", 0xfb}, {&(0x7f00000004c0)="a39040b6b76e3ea1a7412af4dcf1cf762f971958f46bf03aa2cb3aa145ad80ffb8bfc70a28baaf14d34a6533275787292c596049a1512950d82799102d6bf18bd7d4c1b98949075099073af0a9c51aa7d908e8b7104865b11e6d950e7a8a9a3db9af289ac5c44c22b4e7800c8f0d4c69fb993e811df7c75389e28b4bd95d57844854f0b91359d4364ce07b0a36e4211f770f08837d47ddc280cda73a5d1286a10f4adcf006cc224fee4c92750b2d9ced7538eb7941fba596d4dad041e2fd9da401", 0xc1}], 0x6}, 0x40) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet6(0xa, 0x1, 0x6) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0xcb) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x9, 0x1]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x1) 14:58:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x5, 0x1000000, 0x0, 0x2000000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8000000, 0x0}}, 0xfffffdef) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x5, 0x1b, 0x8, 0x2, 0x17, "4cc13f02b1b1d35c"}) (async) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x7, 0xfffff000, 0x9b, "3f494967dfe4ec295e06120f6915d21ba51b93", 0x7a, 0xfffffffe}) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0xfffffffb, 0x7]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x9, "86ab64cb52e9a41a9ef6af9f44ab6f7eccb0443c9967a1afcb2a53ad78f3052a"}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x501801) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x3ff, 0xd2, 0x1, 0x1a, "1688647dab9794990785ed72be43c12cbeccca"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0xfb, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8, 0x5}) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c0) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket$inet6(0xa, 0x1, 0x6) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0xcb) (async, rerun: 32) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async, rerun: 32) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x9, 0x1]) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x1) 14:58:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0xfffffffb, 0x7]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x9, "86ab64cb52e9a41a9ef6af9f44ab6f7eccb0443c9967a1afcb2a53ad78f3052a"}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x501801) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x3ff, 0xd2, 0x1, 0x1a, "1688647dab9794990785ed72be43c12cbeccca"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0xfb, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8, 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0xfffffffb, 0x7]) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x9, "86ab64cb52e9a41a9ef6af9f44ab6f7eccb0443c9967a1afcb2a53ad78f3052a"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x501801) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x3ff, 0xd2, 0x1, 0x1a, "1688647dab9794990785ed72be43c12cbeccca"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0xfb, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8, 0x5}) (async) 14:58:49 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x5, 0x1b, 0x8, 0x2, 0x17, "4cc13f02b1b1d35c"}) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x7, 0xfffff000, 0x9b, "3f494967dfe4ec295e06120f6915d21ba51b93", 0x7a, 0xfffffffe}) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0xfffffff8, 0x7, 0xfffff000, 0x9b, "3f494967dfe4ec295e06120f6915d21ba51b93", 0x7a, 0xfffffffe}) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c0) (async) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet6(0xa, 0x1, 0x6) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0xcb) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x9, 0x1]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket$inet6(0xa, 0x1, 0x6) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0xcb) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) (async) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x9, 0x1]) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x1) (async) 14:58:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0xba000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x80000001, {"ab615908798f7a5fa13b67593eec1304"}, 0xfffffffffffff202, 0x9, 0x200}}}, 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x8000, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000200)=0x8000) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8800000, 0x0}}, 0xfffffdef) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c0) (async) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) 14:58:49 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0xfffffffb, 0x7]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x9, "86ab64cb52e9a41a9ef6af9f44ab6f7eccb0443c9967a1afcb2a53ad78f3052a"}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x501801) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x3ff, 0xd2, 0x1, 0x1a, "1688647dab9794990785ed72be43c12cbeccca"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0xfb, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8, 0x5}) 14:58:49 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000000, 0x0}}, 0xfffffdef) 14:58:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0xba000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x80000001, {"ab615908798f7a5fa13b67593eec1304"}, 0xfffffffffffff202, 0x9, 0x200}}}, 0xa0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x8000, 0x1}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000200)=0x8000) (async) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)) 14:58:49 executing program 0: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1ff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x6, 0x80, 0x1}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="a08d3c50d638b94061462b9b571d9b3c1483c67a8f1222800bad7b57a62709f74dd130147f3b482f15b686d0ad9f6c2399ae", 0x32}, {&(0x7f0000000080)="8451e27ba5a150365c481546fc", 0xd}, {&(0x7f00000000c0)="8bcafa26d8747c94880e93ddc871cf46d51b3d376b9e5441a06ec08d83ca8add3206c84c94393aad54fc4cd8544a03983e65d95adf3a488f40511cdadf8aaebd39e50a29629f5d4271a23cfc80fbeef6f4fb0e41938151616352f48f8e37bc17f9973c5d7f8de06f88e6bb4ff295fccbe1", 0x71}, {&(0x7f0000000140)="5355290d211564c1f86eb2380fed96434bbe8c5116c64c4d7a5b485e55", 0x1d}, {&(0x7f0000000200)="45cb4204c0227797890ece169e7f0f4f58a08fd8bb470166b9e289f4750aef2ecc0345c057e77daf71a49693e0d99d8b2d7ed4a26264aa704ecf2b50f56558d21379e3759a812552ceb66b97db4664014f5670adebb766f813882c44b455565a3dc1d2abdb1e83d31f2f70ae5fe5a4a98a8d9d990ad618b4c3b25fe06afa430a", 0x80}, {&(0x7f0000000280)="8e10bd49ceacce70f690f3d7f9b409d7211ce7eef6ffeaf130b7f57eb769ea9be2cac19e2effc5701c8f8c785675ad26e39e14df75a1486834fab18d1e0438a58b955d784ee94a693369d8a01180e66432db7c27e59d433a9727aa47b33a7f54b9c37b66250198019c048b262c55f36e3c14a4eb7bb5c3b61af44151b7c0520dbea9b48bfd3303f9897f71910b848ac0d2e4037ff978e43eaeff0f510f749a7555", 0xa1}, {&(0x7f0000000340)="c6b68fc00a5af7af32bfd53d88d7a20e833e3ff53c9b66899526772a39fd61d39e18df88f9959cd235dc6233a05a660460497bed97c207f22ca6c2eb1a8ae6a90bac8f95cd2888507f600db1377a042dd2fdaccb8f2b3f8e6b9c95ad2c533d77a6f11489989aaa5c893578cabf294dd1cc94265e821811fe84740cafff2a1435bf26146a2d79e60b343d39983b4eed5b4c59a6d3f56d72071ef8c5e3822cb35adcbef7baf4fff4d8669280cd2d99283b41c0b9903f4fa70f0cafd52804a19c0aabb028216d9ef0f6dced752da8b60f54ba7005", 0xd3}], 0x7, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xc780}}, @tclass={{0x14}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2c, 0xc, '\x00', [@ra={0x5, 0x2, 0xae}, @ra={0x5, 0x2, 0x20}, @generic={0x40, 0x3c, "6dd19c5409fd3bf056c65bb35aa1d6c5150387e9e35f9e3c6407f1f178042a32aad553b3c8400049af4df9613ddd3dff1c18001f67f3c3d1fe8d6f18"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0}, @pad1]}}}], 0xc8}, 0x4008840) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x105001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) 14:58:49 executing program 0: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1ff) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x6, 0x80, 0x1}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:49 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0xba000) (async) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0xba000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x80000001, {"ab615908798f7a5fa13b67593eec1304"}, 0xfffffffffffff202, 0x9, 0x200}}}, 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x8000, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000200)=0x8000) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)) 14:58:49 executing program 2: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x2, 0xfffffffffffffceb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x800, 0xe8, 0x7fffffff, 0xffff7fff, 0x40, "5ad4d404725000000000000c006f1a00", 0x0, 0x10000005}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="a08d3c50d638b94061462b9b571d9b3c1483c67a8f1222800bad7b57a62709f74dd130147f3b482f15b686d0ad9f6c2399ae", 0x32}, {&(0x7f0000000080)="8451e27ba5a150365c481546fc", 0xd}, {&(0x7f00000000c0)="8bcafa26d8747c94880e93ddc871cf46d51b3d376b9e5441a06ec08d83ca8add3206c84c94393aad54fc4cd8544a03983e65d95adf3a488f40511cdadf8aaebd39e50a29629f5d4271a23cfc80fbeef6f4fb0e41938151616352f48f8e37bc17f9973c5d7f8de06f88e6bb4ff295fccbe1", 0x71}, {&(0x7f0000000140)="5355290d211564c1f86eb2380fed96434bbe8c5116c64c4d7a5b485e55", 0x1d}, {&(0x7f0000000200)="45cb4204c0227797890ece169e7f0f4f58a08fd8bb470166b9e289f4750aef2ecc0345c057e77daf71a49693e0d99d8b2d7ed4a26264aa704ecf2b50f56558d21379e3759a812552ceb66b97db4664014f5670adebb766f813882c44b455565a3dc1d2abdb1e83d31f2f70ae5fe5a4a98a8d9d990ad618b4c3b25fe06afa430a", 0x80}, {&(0x7f0000000280)="8e10bd49ceacce70f690f3d7f9b409d7211ce7eef6ffeaf130b7f57eb769ea9be2cac19e2effc5701c8f8c785675ad26e39e14df75a1486834fab18d1e0438a58b955d784ee94a693369d8a01180e66432db7c27e59d433a9727aa47b33a7f54b9c37b66250198019c048b262c55f36e3c14a4eb7bb5c3b61af44151b7c0520dbea9b48bfd3303f9897f71910b848ac0d2e4037ff978e43eaeff0f510f749a7555", 0xa1}, {&(0x7f0000000340)="c6b68fc00a5af7af32bfd53d88d7a20e833e3ff53c9b66899526772a39fd61d39e18df88f9959cd235dc6233a05a660460497bed97c207f22ca6c2eb1a8ae6a90bac8f95cd2888507f600db1377a042dd2fdaccb8f2b3f8e6b9c95ad2c533d77a6f11489989aaa5c893578cabf294dd1cc94265e821811fe84740cafff2a1435bf26146a2d79e60b343d39983b4eed5b4c59a6d3f56d72071ef8c5e3822cb35adcbef7baf4fff4d8669280cd2d99283b41c0b9903f4fa70f0cafd52804a19c0aabb028216d9ef0f6dced752da8b60f54ba7005", 0xd3}], 0x7, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xc780}}, @tclass={{0x14}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2c, 0xc, '\x00', [@ra={0x5, 0x2, 0xae}, @ra={0x5, 0x2, 0x20}, @generic={0x40, 0x3c, "6dd19c5409fd3bf056c65bb35aa1d6c5150387e9e35f9e3c6407f1f178042a32aad553b3c8400049af4df9613ddd3dff1c18001f67f3c3d1fe8d6f18"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0}, @pad1]}}}], 0xc8}, 0x4008840) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x105001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) 14:58:49 executing program 2: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x2, 0xfffffffffffffceb) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x800, 0xe8, 0x7fffffff, 0xffff7fff, 0x40, "5ad4d404725000000000000c006f1a00", 0x0, 0x10000005}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x2, 0xfffffffffffffceb) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x800, 0xe8, 0x7fffffff, 0xffff7fff, 0x40, "5ad4d404725000000000000c006f1a00", 0x0, 0x10000005}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) (async) 14:58:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xc000000, 0x0}}, 0xfffffdef) 14:58:49 executing program 0: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x1ff) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x6, 0x80, 0x1}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="a08d3c50d638b94061462b9b571d9b3c1483c67a8f1222800bad7b57a62709f74dd130147f3b482f15b686d0ad9f6c2399ae", 0x32}, {&(0x7f0000000080)="8451e27ba5a150365c481546fc", 0xd}, {&(0x7f00000000c0)="8bcafa26d8747c94880e93ddc871cf46d51b3d376b9e5441a06ec08d83ca8add3206c84c94393aad54fc4cd8544a03983e65d95adf3a488f40511cdadf8aaebd39e50a29629f5d4271a23cfc80fbeef6f4fb0e41938151616352f48f8e37bc17f9973c5d7f8de06f88e6bb4ff295fccbe1", 0x71}, {&(0x7f0000000140)="5355290d211564c1f86eb2380fed96434bbe8c5116c64c4d7a5b485e55", 0x1d}, {&(0x7f0000000200)="45cb4204c0227797890ece169e7f0f4f58a08fd8bb470166b9e289f4750aef2ecc0345c057e77daf71a49693e0d99d8b2d7ed4a26264aa704ecf2b50f56558d21379e3759a812552ceb66b97db4664014f5670adebb766f813882c44b455565a3dc1d2abdb1e83d31f2f70ae5fe5a4a98a8d9d990ad618b4c3b25fe06afa430a", 0x80}, {&(0x7f0000000280)="8e10bd49ceacce70f690f3d7f9b409d7211ce7eef6ffeaf130b7f57eb769ea9be2cac19e2effc5701c8f8c785675ad26e39e14df75a1486834fab18d1e0438a58b955d784ee94a693369d8a01180e66432db7c27e59d433a9727aa47b33a7f54b9c37b66250198019c048b262c55f36e3c14a4eb7bb5c3b61af44151b7c0520dbea9b48bfd3303f9897f71910b848ac0d2e4037ff978e43eaeff0f510f749a7555", 0xa1}, {&(0x7f0000000340)="c6b68fc00a5af7af32bfd53d88d7a20e833e3ff53c9b66899526772a39fd61d39e18df88f9959cd235dc6233a05a660460497bed97c207f22ca6c2eb1a8ae6a90bac8f95cd2888507f600db1377a042dd2fdaccb8f2b3f8e6b9c95ad2c533d77a6f11489989aaa5c893578cabf294dd1cc94265e821811fe84740cafff2a1435bf26146a2d79e60b343d39983b4eed5b4c59a6d3f56d72071ef8c5e3822cb35adcbef7baf4fff4d8669280cd2d99283b41c0b9903f4fa70f0cafd52804a19c0aabb028216d9ef0f6dced752da8b60f54ba7005", 0xd3}], 0x7, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xc780}}, @tclass={{0x14}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x2c, 0xc, '\x00', [@ra={0x5, 0x2, 0xae}, @ra={0x5, 0x2, 0x20}, @generic={0x40, 0x3c, "6dd19c5409fd3bf056c65bb35aa1d6c5150387e9e35f9e3c6407f1f178042a32aad553b3c8400049af4df9613ddd3dff1c18001f67f3c3d1fe8d6f18"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0}, @pad1]}}}], 0xc8}, 0x4008840) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x105001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @timestamp], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x28, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}, @enter_looper, @release, @dead_binder_done], 0xea, 0x0, &(0x7f00000001c0)="29091d5b65b68e656cc4b81164edcd74c5aa0afc42041ff9be3150589ab5057522241abb5278458d76805b7b1b49e188b9943898d7cdefae81bca42474b2fb6ea3c071617e192cc78fbdecf0ca1aab7a18f0c93dec4b8233e01f1269c9dc8f4b1ccf7d77f860820e3bb0e1a5f0d907972b965d37e3defafc9d34bc79404481e7c2e18685364a0d3c3aacb11311fe362f3b70c4028c6a2e9c72004a61ce32a928aaafc87ea319baa7870113590daa6aef2d6b5f784e10130676cf7612a5bb6d69559d1d651b24c391e754468fae7d452e3c089769d6743a4744f2e721e03d4e6f01ac02f781ceaf6f50fa"}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200000a0) 14:58:49 executing program 2: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x2, 0xfffffffffffffceb) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x800, 0xe8, 0x7fffffff, 0xffff7fff, 0x40, "5ad4d404725000000000000c006f1a00", 0x0, 0x10000005}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208) inotify_rm_watch(0xffffffffffffffff, r1) 14:58:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x5, @mcast1, 0x8000}, 0x1c, 0x0, 0x5b}, 0x4008051) 14:58:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x501480, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 14:58:49 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) 14:58:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208) inotify_rm_watch(0xffffffffffffffff, r1) (async) inotify_rm_watch(0xffffffffffffffff, r1) 14:58:49 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x5, @mcast1, 0x8000}, 0x1c, 0x0, 0x5b}, 0x4008051) 14:58:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe3670f00, 0x0}}, 0xfffffdef) 14:58:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x501480, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208) inotify_rm_watch(0xffffffffffffffff, r1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208) (async) inotify_rm_watch(0xffffffffffffffff, r1) (async) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) 14:58:50 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async, rerun: 32) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) (async, rerun: 32) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x5, @mcast1, 0x8000}, 0x1c, 0x0, 0x5b}, 0x4008051) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) 14:58:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x501480, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xfffffc, 0x0, 0x0, 0x0, "52755b28bfb6ab935a986c99027e2b15d197df", 0x66, 0xffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1ff, 0x9, 0x8906, 0x3ff, 0x20, "1f2e7a800ccb8d675158b069005a5e9fa8c78a", 0x5, 0x80000001}) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800800000000, 0x0}}, 0xfffffdef) 14:58:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x2, 0x46, 0xff, 0x88ac, 0x12, "120e352e9abfd8f0"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xc547, 0x7ff, 0x4, 0x9, 0x10}}) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r0, 0x8040) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xe39}) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xfffffc, 0x0, 0x0, 0x0, "52755b28bfb6ab935a986c99027e2b15d197df", 0x66, 0xffffffff}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1ff, 0x9, 0x8906, 0x3ff, 0x20, "1f2e7a800ccb8d675158b069005a5e9fa8c78a", 0x5, 0x80000001}) 14:58:50 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r0, 0x8040) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xe39}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) syz_open_pts(r0, 0x8040) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x3) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xe39}) (async) 14:58:50 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x2, 0x46, 0xff, 0x88ac, 0x12, "120e352e9abfd8f0"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xc547, 0x7ff, 0x4, 0x9, 0x10}}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xfffffc, 0x0, 0x0, 0x0, "52755b28bfb6ab935a986c99027e2b15d197df", 0x66, 0xffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1ff, 0x9, 0x8906, 0x3ff, 0x20, "1f2e7a800ccb8d675158b069005a5e9fa8c78a", 0x5, 0x80000001}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xfffffc, 0x0, 0x0, 0x0, "52755b28bfb6ab935a986c99027e2b15d197df", 0x66, 0xffffffff}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1ff, 0x9, 0x8906, 0x3ff, 0x20, "1f2e7a800ccb8d675158b069005a5e9fa8c78a", 0x5, 0x80000001}) (async) 14:58:50 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7ffffffffffff, 0x0}}, 0xfffffdef) 14:58:50 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x2, 0x46, 0xff, 0x88ac, 0x12, "120e352e9abfd8f0"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xc547, 0x7ff, 0x4, 0x9, 0x10}}) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x2, 0x46, 0xff, 0x88ac, 0x12, "120e352e9abfd8f0"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xc547, 0x7ff, 0x4, 0x9, 0x10}}) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xfffffffc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3a}) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) syz_open_pts(r0, 0x8040) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x4, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0xe39}) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x200048c0) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x200048c0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x200048c0) (async) 14:58:50 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) syz_open_pts(r1, 0x18602) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xfffffffc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3a}) 14:58:50 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) syz_open_pts(r1, 0x18602) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10000000000000, 0x0}}, 0xfffffdef) 14:58:50 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x5) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xfffffffc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3a}) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x200048c0) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x200048c0) 14:58:50 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) syz_open_pts(r1, 0x18602) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:50 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x11, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:50 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = syz_open_pts(r0, 0x2a424f2072e2368c) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/212) 14:58:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x430, 0x70bd26, 0x400, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '@%!+-'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0xfffffffffffffede, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf26}]}, 0xc0}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) ioctl$TCSETSW2(r3, 0x5453, 0x0) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfffffdef) 14:58:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x430, 0x70bd26, 0x400, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '@%!+-'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0xfffffffffffffede, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf26}]}, 0xc0}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) ioctl$TCSETSW2(r3, 0x5453, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) (async) accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x430, 0x70bd26, 0x400, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '@%!+-'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0xfffffffffffffede, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf26}]}, 0xc0}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) (async) ioctl$TCSETSW2(r3, 0x5453, 0x0) (async) 14:58:50 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = syz_open_pts(r0, 0x2a424f2072e2368c) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (async) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/212) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xdac3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000010}, 0x2000c840) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDISABIO(r2, 0x4b37) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xdac3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000010}, 0x2000c840) (rerun: 32) 14:58:50 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) (async) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000040)) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x430, 0x70bd26, 0x400, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '@%!+-'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0xfffffffffffffede, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf26}]}, 0xc0}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) ioctl$TCSETSW2(r3, 0x5453, 0x0) 14:58:50 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = syz_open_pts(r0, 0x2a424f2072e2368c) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async, rerun: 64) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (async, rerun: 64) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000000c0)=""/212) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x7f, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x1, 0x7, "5a000001030000000000000000000000000002"}) 14:58:50 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000000000000, 0x0}}, 0xfffffdef) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x7fff, 0x5, 0x7, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x5, 0x7, 0x9, 0x5be7}, 0x14) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e1d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xdac3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000010}, 0x2000c840) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x7f, 0x2}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x1, 0x7, "5a000001030000000000000000000000000002"}) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xfff7, 0x7, 0x800}) 14:58:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:50 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x7fff, 0x5, 0x7, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x5, 0x7, 0x9, 0x5be7}, 0x14) ioctl$TCSETSW2(r1, 0x5453, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x7fff, 0x5, 0x7, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x48) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x5, 0x7, 0x9, 0x5be7}, 0x14) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) 14:58:50 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x7f, 0x2}) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x1, 0x7, "5a000001030000000000000000000000000002"}) (rerun: 32) 14:58:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xfff7, 0x7, 0x800}) 14:58:50 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @private0, 0x5}, 0x1c, 0x0}, 0x20044004) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000040)={0x11, 0x10}, 0x18) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xfff7, 0x7, 0x800}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0xfff7, 0x7, 0x800}) (async) 14:58:51 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x7fff, 0x5, 0x7, 0x20, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x8, 0x5, 0x7, 0x9, 0x5be7}, 0x14) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x102, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x1}) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @private0, 0x5}, 0x1c, 0x0}, 0x20044004) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000040)={0x11, 0x10}, 0x18) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x204000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x0, 0x0, 0x0, "7250aac5d3be15d1ff00", 0x0, 0xffffffff}) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x0, 0x0, 0x0, "7250aac5d3be15d1ff00", 0x0, 0xffffffff}) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x102, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x1}) 14:58:51 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2, @private0, 0x5}, 0x1c, 0x0}, 0x20044004) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000040)={0x11, 0x10}, 0x18) 14:58:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141280, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_pts(r0, 0x208402) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x4, 0x8, "99b10eb6b146a0bdbd8e2ba5f84455df0d950f", 0xa5, 0x9}) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x102, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x1}) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0xe8, 0x0, &(0x7f0000000040)="5add1d82940418a75cdaa58c22cd4dd502c21cb09ed91af16b52d091388a270612de2babb5c96646a472d2efa8e3e8bb8969091f5be39ab5f89f504209221e4329ccc340e69958838922a085b7f36af3fb63d59830980bda77597bf227105e4ad67296498220972bdbf7672aa950b50c55f5950f58ae5d832e5f23978ac0f7cf4d2acf2232ee91eac5d9f69fa338301a6b3645451db0a30b809a2f6ce925907b832b7aefc41607d028c78ec500b552eb4ac110ed9939b7c0268136a54ef10156c0222ff53c7854e2513f368443c435a1b8fa6e9ed0981654c18efac43979495cba6d0fcc1556120e"}) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x400000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000001, 0x0, 0x0, 0x0, "7250aac5d3be15d1ff00", 0x0, 0xffffffff}) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/232) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0xe8, 0x0, &(0x7f0000000040)="5add1d82940418a75cdaa58c22cd4dd502c21cb09ed91af16b52d091388a270612de2babb5c96646a472d2efa8e3e8bb8969091f5be39ab5f89f504209221e4329ccc340e69958838922a085b7f36af3fb63d59830980bda77597bf227105e4ad67296498220972bdbf7672aa950b50c55f5950f58ae5d832e5f23978ac0f7cf4d2acf2232ee91eac5d9f69fa338301a6b3645451db0a30b809a2f6ce925907b832b7aefc41607d028c78ec500b552eb4ac110ed9939b7c0268136a54ef10156c0222ff53c7854e2513f368443c435a1b8fa6e9ed0981654c18efac43979495cba6d0fcc1556120e"}) 14:58:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141280, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_pts(r0, 0x208402) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x4, 0x8, "99b10eb6b146a0bdbd8e2ba5f84455df0d950f", 0xa5, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141280, 0x0) (async) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_open_pts(r0, 0x208402) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x4, 0x8, "99b10eb6b146a0bdbd8e2ba5f84455df0d950f", 0xa5, 0x9}) (async) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x87, 0x400000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x6, 0x9, 0x8, 0x3, 0x18, "04a9e2a325e9b179"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000140)={0x10000, 0x8, 0xfeed, 0x1, 0x7, 0x10001}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0xe8, 0x0, &(0x7f0000000040)="5add1d82940418a75cdaa58c22cd4dd502c21cb09ed91af16b52d091388a270612de2babb5c96646a472d2efa8e3e8bb8969091f5be39ab5f89f504209221e4329ccc340e69958838922a085b7f36af3fb63d59830980bda77597bf227105e4ad67296498220972bdbf7672aa950b50c55f5950f58ae5d832e5f23978ac0f7cf4d2acf2232ee91eac5d9f69fa338301a6b3645451db0a30b809a2f6ce925907b832b7aefc41607d028c78ec500b552eb4ac110ed9939b7c0268136a54ef10156c0222ff53c7854e2513f368443c435a1b8fa6e9ed0981654c18efac43979495cba6d0fcc1556120e"}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0xe8, 0x0, &(0x7f0000000040)="5add1d82940418a75cdaa58c22cd4dd502c21cb09ed91af16b52d091388a270612de2babb5c96646a472d2efa8e3e8bb8969091f5be39ab5f89f504209221e4329ccc340e69958838922a085b7f36af3fb63d59830980bda77597bf227105e4ad67296498220972bdbf7672aa950b50c55f5950f58ae5d832e5f23978ac0f7cf4d2acf2232ee91eac5d9f69fa338301a6b3645451db0a30b809a2f6ce925907b832b7aefc41607d028c78ec500b552eb4ac110ed9939b7c0268136a54ef10156c0222ff53c7854e2513f368443c435a1b8fa6e9ed0981654c18efac43979495cba6d0fcc1556120e"}) (async) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/232) 14:58:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141280, 0x0) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = syz_open_pts(r0, 0x208402) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x4, 0x8, "99b10eb6b146a0bdbd8e2ba5f84455df0d950f", 0xa5, 0x9}) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x500000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f00000000c0), 0x87, 0x400000) (async) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x87, 0x400000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x6, 0x9, 0x8, 0x3, 0x18, "04a9e2a325e9b179"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000140)={0x10000, 0x8, 0xfeed, 0x1, 0x7, 0x10001}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x18, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private0, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0xaa3, 0x6, 0x400, 0xb309, 0x46000204, r2}) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/232) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe(&(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101240, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 14:58:51 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c) (async) getsockopt$inet6_mreq(r1, 0x29, 0x18, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private0, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0xaa3, 0x6, 0x400, 0xb309, 0x46000204, r2}) 14:58:51 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x87, 0x400000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x6, 0x9, 0x8, 0x3, 0x18, "04a9e2a325e9b179"}) (async) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000140)={0x10000, 0x8, 0xfeed, 0x1, 0x7, 0x10001}) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) 14:58:51 executing program 2: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x0, "5a755954576d9f0b21b8a9aac5d3be15d397df", 0x4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/131, 0x83, 0x1, &(0x7f0000000140)=""/120, 0x78}, &(0x7f0000000200)=0x40) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe(&(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101240, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) pipe(&(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101240, 0x0) (async) ioctl$TCSETSW2(r2, 0x5453, 0x0) (async) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1000}, 0x1c) (async) getsockopt$inet6_mreq(r1, 0x29, 0x18, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@private0, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0xaa3, 0x6, 0x400, 0xb309, 0x46000204, r2}) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x600000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x1, 0x3, 0xe11, 0x1, 0xff, "b682f68fad393aa5fe78c4151bccd682993f4a", 0x20000, 0x9}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x6, 0x7ff, 0x7, 0x100, 0x16, "85a9882bd37f166c1b8017a2ea7e5242e4167b"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x0, 0x1, 0xffff}) 14:58:51 executing program 2: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x0, "5a755954576d9f0b21b8a9aac5d3be15d397df", 0x4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/131, 0x83, 0x1, &(0x7f0000000140)=""/120, 0x78}, &(0x7f0000000200)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/131, 0x83, 0x1, &(0x7f0000000140)=""/120, 0x78}, &(0x7f0000000200)=0x40) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008071) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0xf, 0x44, &(0x7f0000000000)="0f9033c9da6ead75bf4c09f5151b48a154be8f7dd3b62d6e502370678fcb472c9d588cda6470579eec4954cf603ec324e410b124e2af93162f27dace133f3b840c4e5e3e"}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/45) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) pipe(&(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101240, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 2: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x0, "5a755954576d9f0b21b8a9aac5d3be15d397df", 0x4}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/131, 0x83, 0x1, &(0x7f0000000140)=""/120, 0x78}, &(0x7f0000000200)=0x40) 14:58:51 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x1, 0x3, 0xe11, 0x1, 0xff, "b682f68fad393aa5fe78c4151bccd682993f4a", 0x20000, 0x9}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x6, 0x7ff, 0x7, 0x100, 0x16, "85a9882bd37f166c1b8017a2ea7e5242e4167b"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x0, 0x1, 0xffff}) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:58:51 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008071) (async) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0xf, 0x44, &(0x7f0000000000)="0f9033c9da6ead75bf4c09f5151b48a154be8f7dd3b62d6e502370678fcb472c9d588cda6470579eec4954cf603ec324e410b124e2af93162f27dace133f3b840c4e5e3e"}) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/45) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x604000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 2: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa14}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff00000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xa5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:58:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x1, 0x3, 0xe11, 0x1, 0xff, "b682f68fad393aa5fe78c4151bccd682993f4a", 0x20000, 0x9}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x6, 0x7ff, 0x7, 0x100, 0x16, "85a9882bd37f166c1b8017a2ea7e5242e4167b"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x0, 0x1, 0xffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x1, 0x3, 0xe11, 0x1, 0xff, "b682f68fad393aa5fe78c4151bccd682993f4a", 0x20000, 0x9}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x6, 0x7ff, 0x7, 0x100, 0x16, "85a9882bd37f166c1b8017a2ea7e5242e4167b"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x0, 0x1, 0xffff}) (async) 14:58:51 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008071) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0xf, 0x44, &(0x7f0000000000)="0f9033c9da6ead75bf4c09f5151b48a154be8f7dd3b62d6e502370678fcb472c9d588cda6470579eec4954cf603ec324e410b124e2af93162f27dace133f3b840c4e5e3e"}) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/45) 14:58:51 executing program 2: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa14}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff00000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xa5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x28) 14:58:51 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xf, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:51 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/167) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x8, 0x4, 0x5, 0x8, 0xc6, "cad3cc4a62649da15cccc593fee1296094a548", 0x1, 0x20}) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x1, 0x5f, 0x9}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) 14:58:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800000000000000, 0x0}}, 0xfffffdef) 14:58:51 executing program 2: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa14}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff00000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xa5) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa14}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff00000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xa5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:51 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x28) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x28) (async) 14:58:51 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/167) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x8, 0x4, 0x5, 0x8, 0xc6, "cad3cc4a62649da15cccc593fee1296094a548", 0x1, 0x20}) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x1, 0x5f, 0x9}) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:51 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/167) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x8, 0x4, 0x5, 0x8, 0xc6, "cad3cc4a62649da15cccc593fee1296094a548", 0x1, 0x20}) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x1, 0x5f, 0x9}) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) 14:58:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="5e04000400000000fe880000000000000000000000000900000000000000000100000000000000008a4f59d51e38767a839811e973846cb09d737128d3d7af893cc39b6c107e4aa09290ca3a8d43cb41ba3186608a8445b7610d9ab169ca5421e850721391926c4f2ef68e62734f417a21bd3bba049df0f5ff2ac3e0a0c906eb833786c762535f69005180fe429ce9c0fbd53ef56a99cdf026456737ace8910ae887d26d139fc8e1f5914f13c5be5322efedfb67f847a8f27c9e602ba5d2175564e752da19c243e8ad5942699af5834a66465673d3d65157d00b8c941dd54c11d4b5cae158ba1d562af2b6c33fffff000000000000233782dc01d13f0f119c170bfbd19829f998149e34be176c596f2b61e2f323f8711bb1b061c7ce148efba7b42b994f26d96de89feb27c51ab2f57535e2194adff1c0f7d5e74d3f9798f2c16adf2aba9f766ccc2cd1138b66d921ab3f3a0fc34863d48adbcfdee8b9a6fcf40eb1b3"], 0x28) (async) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x28) 14:58:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x7, 0x7ff}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x9, 0x26f, 0x4, 0xb8, "4e8544ecfc59875d0bdc6f0d46890e24f78c11", 0x87, 0x9}) 14:58:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x7, 0x7ff}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x9, 0x26f, 0x4, 0xb8, "4e8544ecfc59875d0bdc6f0d46890e24f78c11", 0x87, 0x9}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x9, 0x26f, 0x4, 0xb8, "4e8544ecfc59875d0bdc6f0d46890e24f78c11", 0x87, 0x9}) 14:58:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xc00000000000000, 0x0}}, 0xfffffdef) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) 14:58:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x40) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x4, 0x9, 0x2, 0x3f, 0x8, "afebcc8e620f26b2"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000100)={0xfffffffd, 0x1000000, 0x100, 0xffff, 0x1, "5a6836794a690ddc0c9313745acd00", 0x4000006, 0x1fffffc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x50cc0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 14:58:52 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x7, 0x7ff}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x9, 0x26f, 0x4, 0xb8, "4e8544ecfc59875d0bdc6f0d46890e24f78c11", 0x87, 0x9}) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x7, 0x7ff}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x6, 0x9, 0x26f, 0x4, 0xb8, "4e8544ecfc59875d0bdc6f0d46890e24f78c11", 0x87, 0x9}) (async) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/117) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) 14:58:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x40) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x4, 0x9, 0x2, 0x3f, 0x8, "afebcc8e620f26b2"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000100)={0xfffffffd, 0x1000000, 0x100, 0xffff, 0x1, "5a6836794a690ddc0c9313745acd00", 0x4000006, 0x1fffffc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x50cc0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 14:58:52 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/117) 14:58:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe3670f0000000000, 0x0}}, 0xfffffdef) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) (async) 14:58:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80, 0x40) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x4, 0x9, 0x2, 0x3f, 0x8, "afebcc8e620f26b2"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000100)={0xfffffffd, 0x1000000, 0x100, 0xffff, 0x1, "5a6836794a690ddc0c9313745acd00", 0x4000006, 0x1fffffc}) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x50cc0, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 14:58:52 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000080)=""/117) 14:58:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/88) ioctl$TCFLSH(r0, 0x540b, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) 14:58:52 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x1, 0x7, 0x3950, 0xf}}) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffff00000000, 0x0}}, 0xfffffdef) 14:58:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x1, 0x7, 0x3950, 0xf}}) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/88) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) 14:58:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:52 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000080)=""/88) ioctl$TCFLSH(r0, 0x540b, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x1, 0x7, 0x3950, 0xf}}) 14:58:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x616600, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x616600, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffff0700, 0x0}}, 0xfffffdef) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) 14:58:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x15194}, 0x1c) 14:58:52 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x800, 0x1000, 0x1f, '\x00', 0x1f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x401, 0x800, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) 14:58:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x616600, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) (async) 14:58:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:52 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x20ac43) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x311a01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002100), 0x2001, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002140)=""/11) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x60900, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000001100)=""/4096) ioctl$TCSETSW2(r1, 0x5453, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000001080)) 14:58:52 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x800, 0x1000, 0x1f, '\x00', 0x1f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x401, 0x800, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) 14:58:52 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000680)=""/4096) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/235) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:52 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffff7f, 0x0}}, 0xfffffdef) 14:58:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) 14:58:52 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x20ac43) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x311a01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002100), 0x2001, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002140)=""/11) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x60900, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000001100)=""/4096) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000001080)) 14:58:52 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000680)=""/4096) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/235) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000680)=""/4096) (async) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/235) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:58:52 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x800, 0x1000, 0x1f, '\x00', 0x1f}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x800, 0x1000, 0x1f, '\x00', 0x1f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x401, 0x800, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000000c0)) 14:58:52 executing program 1: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x7ff, 0x1a, "c830598017818ff9"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0xb01, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x42) 14:58:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000680)=""/4096) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/235) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xfff, 0x8) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/145) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000240)=0x36) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="a6810cf949e12ec36c0a9decc699273ba2b7257fa6f9e3a6aec72927f33f951cf5efeec11abd34c0a30a5faf4a272957acfb395a61dfa895c758e50a06196a30ec9010a574f62b256aa041546c72178bba1399edb18a7a05e444976548693232bf1063a9220987d353704671e02d2344a1bf764b93f1fd7a1456c4fd89b3afe3f68b8f1934f8", 0x86) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x401, 0x10001, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r4 = getpid() waitid(0x1, r4, 0x0, 0x8, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r4}) 14:58:52 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x20ac43) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/4096) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x311a01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002100), 0x2001, 0x0) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002100), 0x2001, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002140)=""/11) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x60900, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000001100)=""/4096) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000001080)) 14:58:52 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xfff, 0x8) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/145) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000240)=0x36) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="a6810cf949e12ec36c0a9decc699273ba2b7257fa6f9e3a6aec72927f33f951cf5efeec11abd34c0a30a5faf4a272957acfb395a61dfa895c758e50a06196a30ec9010a574f62b256aa041546c72178bba1399edb18a7a05e444976548693232bf1063a9220987d353704671e02d2344a1bf764b93f1fd7a1456c4fd89b3afe3f68b8f1934f8", 0x86) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x401, 0x10001, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r4 = getpid() waitid(0x1, r4, 0x0, 0x8, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r4}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xfff, 0x8) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/145) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000240)=0x36) (async) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="a6810cf949e12ec36c0a9decc699273ba2b7257fa6f9e3a6aec72927f33f951cf5efeec11abd34c0a30a5faf4a272957acfb395a61dfa895c758e50a06196a30ec9010a574f62b256aa041546c72178bba1399edb18a7a05e444976548693232bf1063a9220987d353704671e02d2344a1bf764b93f1fd7a1456c4fd89b3afe3f68b8f1934f8", 0x86) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x401, 0x10001, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) getpid() (async) waitid(0x1, r4, 0x0, 0x8, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r4}) (async) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8, 0x0) bind$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) sendmsg$inet6(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="7ba7d5672005d9b57e05132315b392abd397b82166f8333bda0122088b02d945f2972b3416d31f09a31dfe9beb728b9db64a2c0f55126301662e1d5dcf7cc366b2bb5a89d9fee731966621322ed0f035ff08db2725f0d69a28b8331dc4b9c45ba16feed9e22a589bafef71e1d07c153e44d0369aa40d92761fe93f443c3ae749d8d969a76086f6b12de5d12798ea9a117189bbb8cbce29e425d4f2970d3844b00af27de003cd6f2d79fac7fe953ce1f7114057ca9cde008e2ecf3d86216abddcfc970cb39591ffb7f132a1552a79548bc370f186c6ce21d0b988bf0d", 0xdc}, {&(0x7f0000000180)="ce172877970fa697dbc93ecade1f53da87821c40fc94a10518f7b4906b7fb412927f1ecfd82b7a4f001afd2a74673cf8505c4b572379b8445884e99aa3fda2", 0x3f}, {&(0x7f0000001680)="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", 0x1098}, {&(0x7f0000000200)="7ca0aaec084742ad17399964e6d61d7b6b97e8b6fca7f9463811ed1b7e46ff8f4ed587c5449f523285af70c403a601055fd69925ff3ad74dd97bd9a9da7121cd33d61269393ce098fa49056bae5603825388571d6dfa2adcc67aa0ccbd3c4082168e130c6d72506be99dd10dfd94b1da4aec4310fc56e0627014a791020ee44fbdaa79a6c5", 0xfffffffffffffe7a}, {&(0x7f00000002c0)="fa6a129d7c4e9bfdc8c014255c9f43b58ee3e4dd257886ba39cf0123c008ce287375af5d8e7e3777b235f574a6c1fc3cfdf384c9f94e34845683449a41b09eb90bd31dd64d4cc10316638128b8dcb46be62946fa6d8de7610baed8ff1ae268a0da242f98aa8643f18f550ebc93ae502088a66824fae95f3afde5d1254af5e05a93e6d50388ae97aad340433b027fbc5d558fc18084666114b3", 0x99}, {&(0x7f0000000380)="999f68ac5bef9433871c92e0356129545a204343daa77c209449118d9b53778952183855c3d33830974d813a6ee43c5d319741b892517a7e25e0dbb3a7542a4ef3c96b3367df81671bcff1063cd7107df2fe4b9a583b43b32bee8c09178d93d36307f33fabe46cbc233d27e2dc0d9abca1c31ddee1185f5fea91f0eaa91a49e1d0ae2f63c67b8ac8b7252289cbc7a715de1dbed336b5c98ec0fb87eb4fcf002550e3a399dbd860777250a85e6b339922e76802e23aea67b9a6cffd288d9e43dfd65f9a64d8408014f0603b0a812a89675ff9352e9ce719da7653", 0xda}, {&(0x7f0000000140)="52c6e75b67cb112152ad34769cbe977833f601f843eb95f7992153fb22fe9c56f0d32870932c4e0a67f323d129d52ac5e6747dc0883f40b39f0849c4291e", 0x3e}, {&(0x7f0000000480)="a90520afedfa3b96a5430001081fb5c5767bac885d327ffb1f65fa7bd2feda19d044a5744458f12bb66055425c474a8f0a27f6ec0fa44554faffae1b5f40dbc39d541c4530d04ac8ff465a2cf3ecdfb0b3920d3b54cdba858d462d440b5bb8ee76d4f8815b1728e6830eb5ed13437200", 0x70}], 0x8}, 0x805) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @remote}, 0x1c, 0x0}, 0x4008051) 14:58:53 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:53 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x7ff, 0x1a, "c830598017818ff9"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0xb01, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x42) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x7ff, 0x1a, "c830598017818ff9"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0xb01, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x42) (async) 14:58:53 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xfff, 0x8) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async, rerun: 32) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/145) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000240)=0x36) (async) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="a6810cf949e12ec36c0a9decc699273ba2b7257fa6f9e3a6aec72927f33f951cf5efeec11abd34c0a30a5faf4a272957acfb395a61dfa895c758e50a06196a30ec9010a574f62b256aa041546c72178bba1399edb18a7a05e444976548693232bf1063a9220987d353704671e02d2344a1bf764b93f1fd7a1456c4fd89b3afe3f68b8f1934f8", 0x86) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x401, 0x10001, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r4 = getpid() waitid(0x1, r4, 0x0, 0x8, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r4}) 14:58:53 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:53 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/214) r2 = syz_open_pts(r1, 0x404000) ioctl$KIOCSOUND(r2, 0x4b2f, 0xbd79) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3ff, 0x0, 0x40, "100000000000f1ffffffffffffff00"}) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x7ff, 0x1a, "c830598017818ff9"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0xb01, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x42) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8, 0x0) (rerun: 32) bind$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) sendmsg$inet6(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="7ba7d5672005d9b57e05132315b392abd397b82166f8333bda0122088b02d945f2972b3416d31f09a31dfe9beb728b9db64a2c0f55126301662e1d5dcf7cc366b2bb5a89d9fee731966621322ed0f035ff08db2725f0d69a28b8331dc4b9c45ba16feed9e22a589bafef71e1d07c153e44d0369aa40d92761fe93f443c3ae749d8d969a76086f6b12de5d12798ea9a117189bbb8cbce29e425d4f2970d3844b00af27de003cd6f2d79fac7fe953ce1f7114057ca9cde008e2ecf3d86216abddcfc970cb39591ffb7f132a1552a79548bc370f186c6ce21d0b988bf0d", 0xdc}, {&(0x7f0000000180)="ce172877970fa697dbc93ecade1f53da87821c40fc94a10518f7b4906b7fb412927f1ecfd82b7a4f001afd2a74673cf8505c4b572379b8445884e99aa3fda2", 0x3f}, {&(0x7f0000001680)="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", 0x1098}, {&(0x7f0000000200)="7ca0aaec084742ad17399964e6d61d7b6b97e8b6fca7f9463811ed1b7e46ff8f4ed587c5449f523285af70c403a601055fd69925ff3ad74dd97bd9a9da7121cd33d61269393ce098fa49056bae5603825388571d6dfa2adcc67aa0ccbd3c4082168e130c6d72506be99dd10dfd94b1da4aec4310fc56e0627014a791020ee44fbdaa79a6c5", 0xfffffffffffffe7a}, {&(0x7f00000002c0)="fa6a129d7c4e9bfdc8c014255c9f43b58ee3e4dd257886ba39cf0123c008ce287375af5d8e7e3777b235f574a6c1fc3cfdf384c9f94e34845683449a41b09eb90bd31dd64d4cc10316638128b8dcb46be62946fa6d8de7610baed8ff1ae268a0da242f98aa8643f18f550ebc93ae502088a66824fae95f3afde5d1254af5e05a93e6d50388ae97aad340433b027fbc5d558fc18084666114b3", 0x99}, {&(0x7f0000000380)="999f68ac5bef9433871c92e0356129545a204343daa77c209449118d9b53778952183855c3d33830974d813a6ee43c5d319741b892517a7e25e0dbb3a7542a4ef3c96b3367df81671bcff1063cd7107df2fe4b9a583b43b32bee8c09178d93d36307f33fabe46cbc233d27e2dc0d9abca1c31ddee1185f5fea91f0eaa91a49e1d0ae2f63c67b8ac8b7252289cbc7a715de1dbed336b5c98ec0fb87eb4fcf002550e3a399dbd860777250a85e6b339922e76802e23aea67b9a6cffd288d9e43dfd65f9a64d8408014f0603b0a812a89675ff9352e9ce719da7653", 0xda}, {&(0x7f0000000140)="52c6e75b67cb112152ad34769cbe977833f601f843eb95f7992153fb22fe9c56f0d32870932c4e0a67f323d129d52ac5e6747dc0883f40b39f0849c4291e", 0x3e}, {&(0x7f0000000480)="a90520afedfa3b96a5430001081fb5c5767bac885d327ffb1f65fa7bd2feda19d044a5744458f12bb66055425c474a8f0a27f6ec0fa44554faffae1b5f40dbc39d541c4530d04ac8ff465a2cf3ecdfb0b3920d3b54cdba858d462d440b5bb8ee76d4f8815b1728e6830eb5ed13437200", 0x70}], 0x8}, 0x805) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @remote}, 0x1c, 0x0}, 0x4008051) 14:58:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/214) (async) r2 = syz_open_pts(r1, 0x404000) ioctl$KIOCSOUND(r2, 0x4b2f, 0xbd79) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async, rerun: 32) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3ff, 0x0, 0x40, "100000000000f1ffffffffffffff00"}) 14:58:53 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0xfffffdef) 14:58:53 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x3, 0x4, 0x3ff, 0xff, 0x87, "3650565929e57a585bcc759c4962822ecda024", 0x0, 0xffffff3e}) 14:58:53 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/214) r2 = syz_open_pts(r1, 0x404000) ioctl$KIOCSOUND(r2, 0x4b2f, 0xbd79) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) (async) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3ff, 0x0, 0x40, "100000000000f1ffffffffffffff00"}) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x8, 0x0) bind$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) sendmsg$inet6(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="7ba7d5672005d9b57e05132315b392abd397b82166f8333bda0122088b02d945f2972b3416d31f09a31dfe9beb728b9db64a2c0f55126301662e1d5dcf7cc366b2bb5a89d9fee731966621322ed0f035ff08db2725f0d69a28b8331dc4b9c45ba16feed9e22a589bafef71e1d07c153e44d0369aa40d92761fe93f443c3ae749d8d969a76086f6b12de5d12798ea9a117189bbb8cbce29e425d4f2970d3844b00af27de003cd6f2d79fac7fe953ce1f7114057ca9cde008e2ecf3d86216abddcfc970cb39591ffb7f132a1552a79548bc370f186c6ce21d0b988bf0d", 0xdc}, {&(0x7f0000000180)="ce172877970fa697dbc93ecade1f53da87821c40fc94a10518f7b4906b7fb412927f1ecfd82b7a4f001afd2a74673cf8505c4b572379b8445884e99aa3fda2", 0x3f}, {&(0x7f0000001680)="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", 0x1098}, {&(0x7f0000000200)="7ca0aaec084742ad17399964e6d61d7b6b97e8b6fca7f9463811ed1b7e46ff8f4ed587c5449f523285af70c403a601055fd69925ff3ad74dd97bd9a9da7121cd33d61269393ce098fa49056bae5603825388571d6dfa2adcc67aa0ccbd3c4082168e130c6d72506be99dd10dfd94b1da4aec4310fc56e0627014a791020ee44fbdaa79a6c5", 0xfffffffffffffe7a}, {&(0x7f00000002c0)="fa6a129d7c4e9bfdc8c014255c9f43b58ee3e4dd257886ba39cf0123c008ce287375af5d8e7e3777b235f574a6c1fc3cfdf384c9f94e34845683449a41b09eb90bd31dd64d4cc10316638128b8dcb46be62946fa6d8de7610baed8ff1ae268a0da242f98aa8643f18f550ebc93ae502088a66824fae95f3afde5d1254af5e05a93e6d50388ae97aad340433b027fbc5d558fc18084666114b3", 0x99}, {&(0x7f0000000380)="999f68ac5bef9433871c92e0356129545a204343daa77c209449118d9b53778952183855c3d33830974d813a6ee43c5d319741b892517a7e25e0dbb3a7542a4ef3c96b3367df81671bcff1063cd7107df2fe4b9a583b43b32bee8c09178d93d36307f33fabe46cbc233d27e2dc0d9abca1c31ddee1185f5fea91f0eaa91a49e1d0ae2f63c67b8ac8b7252289cbc7a715de1dbed336b5c98ec0fb87eb4fcf002550e3a399dbd860777250a85e6b339922e76802e23aea67b9a6cffd288d9e43dfd65f9a64d8408014f0603b0a812a89675ff9352e9ce719da7653", 0xda}, {&(0x7f0000000140)="52c6e75b67cb112152ad34769cbe977833f601f843eb95f7992153fb22fe9c56f0d32870932c4e0a67f323d129d52ac5e6747dc0883f40b39f0849c4291e", 0x3e}, {&(0x7f0000000480)="a90520afedfa3b96a5430001081fb5c5767bac885d327ffb1f65fa7bd2feda19d044a5744458f12bb66055425c474a8f0a27f6ec0fa44554faffae1b5f40dbc39d541c4530d04ac8ff465a2cf3ecdfb0b3920d3b54cdba858d462d440b5bb8ee76d4f8815b1728e6830eb5ed13437200", 0x70}], 0x8}, 0x805) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @remote}, 0x1c, 0x0}, 0x4008051) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x8, 0x0) (async) bind$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) (async) sendmsg$inet6(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="7ba7d5672005d9b57e05132315b392abd397b82166f8333bda0122088b02d945f2972b3416d31f09a31dfe9beb728b9db64a2c0f55126301662e1d5dcf7cc366b2bb5a89d9fee731966621322ed0f035ff08db2725f0d69a28b8331dc4b9c45ba16feed9e22a589bafef71e1d07c153e44d0369aa40d92761fe93f443c3ae749d8d969a76086f6b12de5d12798ea9a117189bbb8cbce29e425d4f2970d3844b00af27de003cd6f2d79fac7fe953ce1f7114057ca9cde008e2ecf3d86216abddcfc970cb39591ffb7f132a1552a79548bc370f186c6ce21d0b988bf0d", 0xdc}, {&(0x7f0000000180)="ce172877970fa697dbc93ecade1f53da87821c40fc94a10518f7b4906b7fb412927f1ecfd82b7a4f001afd2a74673cf8505c4b572379b8445884e99aa3fda2", 0x3f}, {&(0x7f0000001680)="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", 0x1098}, {&(0x7f0000000200)="7ca0aaec084742ad17399964e6d61d7b6b97e8b6fca7f9463811ed1b7e46ff8f4ed587c5449f523285af70c403a601055fd69925ff3ad74dd97bd9a9da7121cd33d61269393ce098fa49056bae5603825388571d6dfa2adcc67aa0ccbd3c4082168e130c6d72506be99dd10dfd94b1da4aec4310fc56e0627014a791020ee44fbdaa79a6c5", 0xfffffffffffffe7a}, {&(0x7f00000002c0)="fa6a129d7c4e9bfdc8c014255c9f43b58ee3e4dd257886ba39cf0123c008ce287375af5d8e7e3777b235f574a6c1fc3cfdf384c9f94e34845683449a41b09eb90bd31dd64d4cc10316638128b8dcb46be62946fa6d8de7610baed8ff1ae268a0da242f98aa8643f18f550ebc93ae502088a66824fae95f3afde5d1254af5e05a93e6d50388ae97aad340433b027fbc5d558fc18084666114b3", 0x99}, {&(0x7f0000000380)="999f68ac5bef9433871c92e0356129545a204343daa77c209449118d9b53778952183855c3d33830974d813a6ee43c5d319741b892517a7e25e0dbb3a7542a4ef3c96b3367df81671bcff1063cd7107df2fe4b9a583b43b32bee8c09178d93d36307f33fabe46cbc233d27e2dc0d9abca1c31ddee1185f5fea91f0eaa91a49e1d0ae2f63c67b8ac8b7252289cbc7a715de1dbed336b5c98ec0fb87eb4fcf002550e3a399dbd860777250a85e6b339922e76802e23aea67b9a6cffd288d9e43dfd65f9a64d8408014f0603b0a812a89675ff9352e9ce719da7653", 0xda}, {&(0x7f0000000140)="52c6e75b67cb112152ad34769cbe977833f601f843eb95f7992153fb22fe9c56f0d32870932c4e0a67f323d129d52ac5e6747dc0883f40b39f0849c4291e", 0x3e}, {&(0x7f0000000480)="a90520afedfa3b96a5430001081fb5c5767bac885d327ffb1f65fa7bd2feda19d044a5744458f12bb66055425c474a8f0a27f6ec0fa44554faffae1b5f40dbc39d541c4530d04ac8ff465a2cf3ecdfb0b3920d3b54cdba858d462d440b5bb8ee76d4f8815b1728e6830eb5ed13437200", 0x70}], 0x8}, 0x805) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @remote}, 0x1c, 0x0}, 0x4008051) (async) 14:58:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x93, 0xbe7, 0x0, 0x3, 0x2, "64527cc69b17ebfaf1976c2dfff29a873ae09d", 0xfffff087, 0x8}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x3, "5a755b38bfb6ab37147250aac5d3be15d197df"}) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x3, 0x4, 0x3ff, 0xff, 0x87, "3650565929e57a585bcc759c4962822ecda024", 0x0, 0xffffff3e}) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008851) 14:58:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x42000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x222803) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x9) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e21, 0x4b, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x68, 0x29, 0x37, {0x62, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0xa2df, [0xffffffffffffff47, 0x0, 0xffffffff00000001, 0xd4e, 0x7fffffff, 0x81, 0x8]}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xca4}, @enc_lim={0x4, 0x1, 0xde}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts={{0x78, 0x29, 0x36, {0x3a, 0xc, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x4, [0x0, 0x4]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0xb413, [0x5, 0xba6f, 0x7a26b05d]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x0, 0x0, [@empty, @mcast1, @private0]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x0, 0x4, 0x40, 0x4, [0x0, 0xffffffff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x3, [0x1]}}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x81}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x200}, 0x40020) 14:58:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x93, 0xbe7, 0x0, 0x3, 0x2, "64527cc69b17ebfaf1976c2dfff29a873ae09d", 0xfffff087, 0x8}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x3, "5a755b38bfb6ab37147250aac5d3be15d197df"}) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x3, 0x4, 0x3ff, 0xff, 0x87, "3650565929e57a585bcc759c4962822ecda024", 0x0, 0xffffff3e}) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4}}, 0xfffffdef) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008851) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x9) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e21, 0x4b, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x68, 0x29, 0x37, {0x62, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0xa2df, [0xffffffffffffff47, 0x0, 0xffffffff00000001, 0xd4e, 0x7fffffff, 0x81, 0x8]}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xca4}, @enc_lim={0x4, 0x1, 0xde}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts={{0x78, 0x29, 0x36, {0x3a, 0xc, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x4, [0x0, 0x4]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0xb413, [0x5, 0xba6f, 0x7a26b05d]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x0, 0x0, [@empty, @mcast1, @private0]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x0, 0x4, 0x40, 0x4, [0x0, 0xffffffff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x3, [0x1]}}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x81}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x200}, 0x40020) 14:58:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x42000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x222803) (rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x93, 0xbe7, 0x0, 0x3, 0x2, "64527cc69b17ebfaf1976c2dfff29a873ae09d", 0xfffff087, 0x8}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x93, 0xbe7, 0x0, 0x3, 0x2, "64527cc69b17ebfaf1976c2dfff29a873ae09d", 0xfffff087, 0x8}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x3, "5a755b38bfb6ab37147250aac5d3be15d197df"}) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x49, 0x8000}) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x4008851) 14:58:53 executing program 4: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000080)=""/28) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xfffffff9, 0x5827, 0x12, 0x6, 0x5, "0d5882c3ed78ac009957e325b60dbc1d05c7f8"}) 14:58:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x42000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x222803) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x9) (async) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e21, 0x4b, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000200)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0x68, 0x29, 0x37, {0x62, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0xa2df, [0xffffffffffffff47, 0x0, 0xffffffff00000001, 0xd4e, 0x7fffffff, 0x81, 0x8]}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xca4}, @enc_lim={0x4, 0x1, 0xde}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts={{0x78, 0x29, 0x36, {0x3a, 0xc, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x4, [0x0, 0x4]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x81, 0xb413, [0x5, 0xba6f, 0x7a26b05d]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x0, 0x0, [@empty, @mcast1, @private0]}}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x0, 0x4, 0x40, 0x4, [0x0, 0xffffffff]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x40, 0x3, [0x1]}}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x81}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x200}, 0x40020) 14:58:53 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x49, 0x8000}) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008851) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x5}}, 0xfffffdef) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']^\xea['}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24000011) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:53 executing program 4: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000080)=""/28) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xfffffff9, 0x5827, 0x12, 0x6, 0x5, "0d5882c3ed78ac009957e325b60dbc1d05c7f8"}) 14:58:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xdc540, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x4, 0x49, 0x8000}) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008851) 14:58:53 executing program 4: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000080)=""/28) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xfffffff9, 0x5827, 0x12, 0x6, 0x5, "0d5882c3ed78ac009957e325b60dbc1d05c7f8"}) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']^\xea['}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24000011) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) 14:58:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xdc540, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$TCSETSW2(r0, 0x5453, 0x0) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4008851) 14:58:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xdc540, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xdc540, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) (async) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6}}, 0xfffffdef) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, ']^\xea['}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24000011) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 4: socket$inet(0x2, 0x5, 0x6) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfe, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) 14:58:53 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5, 0x80, 0x8}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x400, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x181800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x200, 0x2}) ioctl$TCSETSW2(r1, 0x5453, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x280200, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x9, 0x6, 0x3ba5}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) pipe2$watch_queue(&(0x7f0000000000), 0x80) 14:58:53 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) pipe2$watch_queue(&(0x7f0000000000), 0x80) 14:58:53 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5, 0x80, 0x8}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x400, 0x4) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x400, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x181800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x200, 0x2}) ioctl$TCSETSW2(r1, 0x5453, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x280200, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x9, 0x6, 0x3ba5}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008851) 14:58:53 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x8}}, 0xfffffdef) 14:58:53 executing program 4: socket$inet(0x2, 0x5, 0x6) (async) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfe, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async, rerun: 32) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 14:58:53 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x5, 0x80, 0x8}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20001, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000000c0)=0x400, 0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x181800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x200, 0x2}) (async) ioctl$TCSETSW2(r1, 0x5453, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x280200, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x20, 0x9, 0x6, 0x3ba5}}) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000001c0)) 14:58:53 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 14:58:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x80, 0x1f, 0x8}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000680)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f0000000080)={0x7b2, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, {{0xa, 0x4e23, 0x3, @local, 0x1000}}}, 0x108) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) ioctl$KDDISABIO(r4, 0x4b37) 14:58:53 executing program 4: socket$inet(0x2, 0x5, 0x6) (async) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfe, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 14:58:53 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:53 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xc}}, 0xfffffdef) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x80, 0x1f, 0x8}, 0x10) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async, rerun: 64) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000680)=""/4096, &(0x7f0000000000)=0x1000) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f0000000080)={0x7b2, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, {{0xa, 0x4e23, 0x3, @local, 0x1000}}}, 0x108) (rerun: 32) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$KDDISABIO(r4, 0x4b37) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3}) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x80, 0x1f, 0x8}, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000200), 0x80) (async) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000680)=""/4096, &(0x7f0000000000)=0x1000) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x0, &(0x7f0000000080)={0x7b2, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, {{0xa, 0x4e23, 0x3, @local, 0x1000}}}, 0x108) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) ioctl$KDDISABIO(r4, 0x4b37) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0xa, 0x3, &(0x7f0000000080)}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000500)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@local}, &(0x7f00000004c0)=0x14) 14:58:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x1) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @mcast1, 0xfffffffe}, 0x1c, 0x0}, 0x4008051) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x10}}, 0xfffffdef) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0xa, 0x3, &(0x7f0000000080)}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000500)) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@local}, &(0x7f00000004c0)=0x14) 14:58:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "d197dfa3001b0000003d9caabf5f1bd96e00"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x8, 0x81, 0x9}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @mcast1, 0xfffffffe}, 0x1c, 0x0}, 0x4008051) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @mcast1, 0xfffffffe}, 0x1c, 0x0}, 0x4008051) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) (async) 14:58:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x4, @mcast1, 0xfffffffe}, 0x1c, 0x0}, 0x4008051) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) 14:58:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "d197dfa3001b0000003d9caabf5f1bd96e00"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x8, 0x81, 0x9}) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0xa, 0x3, &(0x7f0000000080)}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000500)) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000480)={@local}, &(0x7f00000004c0)=0x14) 14:58:54 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x204}}, 0xfffffdef) 14:58:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000040), 0x800) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x9, 0x6}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0xffff, 0x1}, @sack_perm, @window={0x3, 0x8352, 0x469c}], 0x7) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0x0, 0x0, "d197dfa3001b0000003d9caabf5f1bd96e00"}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x8, 0x81, 0x9}) 14:58:54 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000040), 0x800) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x9, 0x6}) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0xffff, 0x1}, @sack_perm, @window={0x3, 0x8352, 0x469c}], 0x7) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 14:58:54 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x402}}, 0xfffffdef) 14:58:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x4}) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (rerun: 64) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 14:58:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000040), 0x800) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x9, 0x6}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0xffff, 0x1}, @sack_perm, @window={0x3, 0x8352, 0x469c}], 0x7) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=""/65, &(0x7f0000000180)=0x41) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)="90b15c26d8e57b3d6d870c9bfd8eb79a2769d3a5f4efabe7e7f5af7dd253ada87dabd5092480fab173509df07903043c74fd8173c1bc7b72f896b8e8d1958fa3e8c2d7bb866d38e5e2f07f8fdebaab7805be90072cb79d10df7b386ed34446c6aeec371af9b844fdb3690f60619507e6f7", 0x71) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) accept$phonet_pipe(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) 14:58:54 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=""/65, &(0x7f0000000180)=0x41) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)="90b15c26d8e57b3d6d870c9bfd8eb79a2769d3a5f4efabe7e7f5af7dd253ada87dabd5092480fab173509df07903043c74fd8173c1bc7b72f896b8e8d1958fa3e8c2d7bb866d38e5e2f07f8fdebaab7805be90072cb79d10df7b386ed34446c6aeec371af9b844fdb3690f60619507e6f7", 0x71) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x406}}, 0xfffffdef) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) 14:58:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=""/65, &(0x7f0000000180)=0x41) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)="90b15c26d8e57b3d6d870c9bfd8eb79a2769d3a5f4efabe7e7f5af7dd253ada87dabd5092480fab173509df07903043c74fd8173c1bc7b72f896b8e8d1958fa3e8c2d7bb866d38e5e2f07f8fdebaab7805be90072cb79d10df7b386ed34446c6aeec371af9b844fdb3690f60619507e6f7", 0x71) (async, rerun: 32) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/67) 14:58:54 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x500}}, 0xfffffdef) 14:58:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a74cb2fac5909e9f67250aac5d3be15d197df"}) 14:58:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 32) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/67) (rerun: 32) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a74cb2fac5909e9f67250aac5d3be15d197df"}) 14:58:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x80000, 0x0, "5a755b38bfb6ab163c7250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0xfffffffffffffedd, 0x0}, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0xc70) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'bond0\x00'}}, 0x1e) 14:58:54 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/67) 14:58:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x600}}, 0xfffffdef) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) gettid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x1}) 14:58:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x80000, 0x0, "5a755b38bfb6ab163c7250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0xfffffffffffffedd, 0x0}, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0xc70) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'bond0\x00'}}, 0x1e) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x80000, 0x0, "5a755b38bfb6ab163c7250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0xff) (async) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0xfffffffffffffedd, 0x0}, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xc70) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'bond0\x00'}}, 0x1e) (async) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a74cb2fac5909e9f67250aac5d3be15d197df"}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) gettid() (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x1}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x14, "39755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x4, 0x3, 0xffffffff, 0xe0, "750522926efd4778ca529b28c6e269abb7036f", 0x5, 0x400}) 14:58:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)=0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x4, 0x1000000, 0x0, 0x80000, 0x0, "5a755b38bfb6ab163c7250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0xfffffffffffffedd, 0x0}, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$TIOCGPTPEER(r1, 0x5441, 0xc70) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'bond0\x00'}}, 0x1e) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) gettid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x1}) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x604}}, 0xfffffdef) 14:58:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x14, "39755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x4, 0x3, 0xffffffff, 0xe0, "750522926efd4778ca529b28c6e269abb7036f", 0x5, 0x400}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0xcb79, 0x0, "5ad197df00"}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0xcb79, 0x0, "5ad197df00"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1}, 0x1c, 0x0}, 0x40000) 14:58:55 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x14, "39755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x4, 0x3, 0xffffffff, 0xe0, "750522926efd4778ca529b28c6e269abb7036f", 0x5, 0x400}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x4, 0x3, 0xffffffff, 0xe0, "750522926efd4778ca529b28c6e269abb7036f", 0x5, 0x400}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000080)={0x2, 0x1000000, 0x0, 0xcb79, 0x0, "5ad197df00"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1}, 0x1c, 0x0}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1}, 0x1c, 0x0}, 0x40000) (async) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xc00}}, 0xfffffdef) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffffd, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xffffffffffffff8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x29}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xf0, 0x20000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1}, 0x1c, 0x0}, 0x40000) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1}, 0x1c, 0x0}, 0x40000) 14:58:55 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e25, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6(0xa, 0x80000, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="45c6dfdb9d786e7daa5fb0f5c7a58d9d73e5e11f78b80a1140de6b1275609448bbfeaa17ad35933718c85b7fa9ca2b59b47c84411c25249f94f6276ac9e407e8c3720a9623ef920b38d1b957cd74637088c651b1486c642e7f88e077c07c3d8c325b3e119c32c661832cd9357b13573015bbf54727f337c3dd210aa8ae52c2d2a2d39bd55f4ad57b570834ca1d1c4fc0d19ec612485cfa2223b919842097a91754a09ede71065b89938a1e6cc711ba11458211c8", 0xb4}, {&(0x7f0000000140)="37bc250519dcec41aa6c034b1e5599f3c77b3a7b576e4c9ead59885b5bfe466dd16faf5544b67482cda78bd96074288f924a05535c700199d9a00c4a152e6ee3fc6484fb581e121f67662996af153dca52304b5991c38d718645b9028b254b64715306b1c64db272c74a5a74bce9d04ead37f0968c06571c45a14169b4042529aa895279c0abf1ed79c6adc63954556487c337a8ab7a59d49113390423f8699ea9fbbad5c2261553149df8ce8c134bfd895c7f162b3e3223d7ed", 0xba}], 0x2, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x1, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @mcast1, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0xf0}, 0x14) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffffd, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffffd, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffffd, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0xfffffffd, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xffffffffffffff8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x29}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xf0, 0x20000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xffffffffffffff8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x29}}, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0xf0, 0x20000) (async) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)) (async) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xffffffffffffff8f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x29}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xf0, 0x20000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000000c0)) 14:58:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x131100, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000140)=""/76) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x6, 0x8001, 0xffff0000, 0x9000, 0x5, "2cfa6f02120fd687f84cf23d49289109b733f5", 0x1, 0x1ff}) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0x401, 0x4, 0x5}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e25, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6(0xa, 0x80000, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="45c6dfdb9d786e7daa5fb0f5c7a58d9d73e5e11f78b80a1140de6b1275609448bbfeaa17ad35933718c85b7fa9ca2b59b47c84411c25249f94f6276ac9e407e8c3720a9623ef920b38d1b957cd74637088c651b1486c642e7f88e077c07c3d8c325b3e119c32c661832cd9357b13573015bbf54727f337c3dd210aa8ae52c2d2a2d39bd55f4ad57b570834ca1d1c4fc0d19ec612485cfa2223b919842097a91754a09ede71065b89938a1e6cc711ba11458211c8", 0xb4}, {&(0x7f0000000140)="37bc250519dcec41aa6c034b1e5599f3c77b3a7b576e4c9ead59885b5bfe466dd16faf5544b67482cda78bd96074288f924a05535c700199d9a00c4a152e6ee3fc6484fb581e121f67662996af153dca52304b5991c38d718645b9028b254b64715306b1c64db272c74a5a74bce9d04ead37f0968c06571c45a14169b4042529aa895279c0abf1ed79c6adc63954556487c337a8ab7a59d49113390423f8699ea9fbbad5c2261553149df8ce8c134bfd895c7f162b3e3223d7ed", 0xba}], 0x2, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x1, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @mcast1, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0xf0}, 0x14) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x131100, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000140)=""/76) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x6, 0x8001, 0xffff0000, 0x9000, 0x5, "2cfa6f02120fd687f84cf23d49289109b733f5", 0x1, 0x1ff}) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0x401, 0x4, 0x5}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x131100, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000140)=""/76) (async) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0x6, 0x8001, 0xffff0000, 0x9000, 0x5, "2cfa6f02120fd687f84cf23d49289109b733f5", 0x1, 0x1ff}) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0x401, 0x4, 0x5}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e25, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6(0xa, 0x80000, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="45c6dfdb9d786e7daa5fb0f5c7a58d9d73e5e11f78b80a1140de6b1275609448bbfeaa17ad35933718c85b7fa9ca2b59b47c84411c25249f94f6276ac9e407e8c3720a9623ef920b38d1b957cd74637088c651b1486c642e7f88e077c07c3d8c325b3e119c32c661832cd9357b13573015bbf54727f337c3dd210aa8ae52c2d2a2d39bd55f4ad57b570834ca1d1c4fc0d19ec612485cfa2223b919842097a91754a09ede71065b89938a1e6cc711ba11458211c8", 0xb4}, {&(0x7f0000000140)="37bc250519dcec41aa6c034b1e5599f3c77b3a7b576e4c9ead59885b5bfe466dd16faf5544b67482cda78bd96074288f924a05535c700199d9a00c4a152e6ee3fc6484fb581e121f67662996af153dca52304b5991c38d718645b9028b254b64715306b1c64db272c74a5a74bce9d04ead37f0968c06571c45a14169b4042529aa895279c0abf1ed79c6adc63954556487c337a8ab7a59d49113390423f8699ea9fbbad5c2261553149df8ce8c134bfd895c7f162b3e3223d7ed", 0xba}], 0x2, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x1, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, @mcast1, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0xf0}, 0x14) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)="11", 0x1, 0xfffffffffffffffa) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="11", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1, r2}, &(0x7f00000000c0)=""/156, 0x9c, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0xfffffdef) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0xfffffffd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0xfa3, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x16, 0x2, 0x2, 0xfe, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/110, 0x6e, 0x40000000, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb822, {{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x3, [{{0xa, 0x4e21, 0xfbaa, @loopback, 0x3}}, {{0xa, 0x4e23, 0x2, @loopback, 0x4}}, {{0xa, 0x4e23, 0x5, @empty, 0x2}}]}, 0x210) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0xfa3, 0x4) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x16, 0x2, 0x2, 0xfe, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/110, 0x6e, 0x40000000, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb822, {{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x3, [{{0xa, 0x4e21, 0xfbaa, @loopback, 0x3}}, {{0xa, 0x4e23, 0x2, @loopback, 0x4}}, {{0xa, 0x4e23, 0x5, @empty, 0x2}}]}, 0x210) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0xfffffffd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0xfffffffd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)="11", 0x1, 0xfffffffffffffffa) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="11", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1, r2}, &(0x7f00000000c0)=""/156, 0x9c, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xe, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 64) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0xfa3, 0x4) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x16, 0x2, 0x2, 0xfe, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x18) (rerun: 32) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/110, 0x6e, 0x40000000, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb822, {{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x3, [{{0xa, 0x4e21, 0xfbaa, @loopback, 0x3}}, {{0xa, 0x4e23, 0x2, @loopback, 0x4}}, {{0xa, 0x4e23, 0x5, @empty, 0x2}}]}, 0x210) (rerun: 64) 14:58:55 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0xfffffdef) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000002, 0x0, 0xfffffffd, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100)="11", 0x1, 0xfffffffffffffffa) (rerun: 64) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="11", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1, r2}, &(0x7f00000000c0)=""/156, 0x9c, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (rerun: 64) 14:58:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:55 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) getsockname$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000000000a004e210000097a20010000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e23000000002001000000000000000000000000000200000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e207ffffffffe80000000000000000000000000002f08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f63776a86b1a31ca7d52d2917b94b"], 0x210) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x390) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:55 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:55 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) getsockname$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000000000a004e210000097a20010000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e23000000002001000000000000000000000000000200000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e207ffffffffe80000000000000000000000000002f08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f63776a86b1a31ca7d52d2917b94b"], 0x210) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x390) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfff, 0x5, 0x18000, 0x6, 0x7f, "1d2fbe0333a94a90c5c6ab018fe9a215c0936c", 0x7, 0x1}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x6, 0xf96e}) 14:58:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0xfffffdef) 14:58:56 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) getsockname$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000000000a004e210000097a20010000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e23000000002001000000000000000000000000000200000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e207ffffffffe80000000000000000000000000002f08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f63776a86b1a31ca7d52d2917b94b"], 0x210) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x390) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x800) (async) getsockname$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000000000000a004e210000097a20010000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e23000000002001000000000000000000000000000200000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe8000000000000000000000000000bb09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e207ffffffffe80000000000000000000000000002f08000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f63776a86b1a31ca7d52d2917b94b"], 0x210) (async) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x390) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:58:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfff, 0x5, 0x18000, 0x6, 0x7f, "1d2fbe0333a94a90c5c6ab018fe9a215c0936c", 0x7, 0x1}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfff, 0x5, 0x18000, 0x6, 0x7f, "1d2fbe0333a94a90c5c6ab018fe9a215c0936c", 0x7, 0x1}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x6, 0xf96e}) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfff, 0x5, 0x18000, 0x6, 0x7f, "1d2fbe0333a94a90c5c6ab018fe9a215c0936c", 0x7, 0x1}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x6, 0xf96e}) 14:58:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x2) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b6a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}, @decrefs], 0xaf, 0x0, &(0x7f00000000c0)="588a8976165e69b90314703133ab4b7c821f5340d81b94d4ffeaa4178420fedfbb7f2a8e4f4f57c28ba00f4029827266d78016810ba837ffa7430f4ee6deb8654cc5d410949b0ab588ba3da11fcaf965d4da09d4c4d0878dc29c82a38b08d1d8948c3f1f0432041f1a67fcd7c28f5ca3f320cc3f33b63927b8d017e1e85de269ceeaec2ad6e97fe8887d7aa04830de98b7719e03faaa2e7b3cf19424f5163fdf3f741fad8ca162fe837a6f4249cd04"}) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0x0, "5a755b38bfb6ab12000000aac5d3be15d197df", 0x0, 0x898}) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0xfffffdef) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x404c004) 14:58:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b6a, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}, @decrefs], 0xaf, 0x0, &(0x7f00000000c0)="588a8976165e69b90314703133ab4b7c821f5340d81b94d4ffeaa4178420fedfbb7f2a8e4f4f57c28ba00f4029827266d78016810ba837ffa7430f4ee6deb8654cc5d410949b0ab588ba3da11fcaf965d4da09d4c4d0878dc29c82a38b08d1d8948c3f1f0432041f1a67fcd7c28f5ca3f320cc3f33b63927b8d017e1e85de269ceeaec2ad6e97fe8887d7aa04830de98b7719e03faaa2e7b3cf19424f5163fdf3f741fad8ca162fe837a6f4249cd04"}) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0x0, "5a755b38bfb6ab12000000aac5d3be15d197df", 0x0, 0x898}) 14:58:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x404c004) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x404c004) (async) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x4b6a, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}, @decrefs], 0xaf, 0x0, &(0x7f00000000c0)="588a8976165e69b90314703133ab4b7c821f5340d81b94d4ffeaa4178420fedfbb7f2a8e4f4f57c28ba00f4029827266d78016810ba837ffa7430f4ee6deb8654cc5d410949b0ab588ba3da11fcaf965d4da09d4c4d0878dc29c82a38b08d1d8948c3f1f0432041f1a67fcd7c28f5ca3f320cc3f33b63927b8d017e1e85de269ceeaec2ad6e97fe8887d7aa04830de98b7719e03faaa2e7b3cf19424f5163fdf3f741fad8ca162fe837a6f4249cd04"}) (async) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1, 0x0, 0x0, "5a755b38bfb6ab12000000aac5d3be15d197df", 0x0, 0x898}) 14:58:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x8}}, 0xfffffdef) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x404c004) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3, 0x8, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0xfffffdef) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x4008051) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (rerun: 64) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3, 0x8, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x4008051) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) [ 3341.034687][T17014] ================================================================== [ 3341.042791][T17014] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 3341.051744][T17014] [ 3341.054082][T17014] read-write to 0xffff888100130b50 of 8 bytes by task 17020 on cpu 1: [ 3341.062242][T17014] percpu_counter_add_batch+0xc9/0x140 [ 3341.067711][T17014] shmem_get_folio_gfp+0x759/0x1200 [ 3341.072939][T17014] shmem_write_begin+0xa6/0x1d0 [ 3341.077807][T17014] generic_perform_write+0x1cf/0x410 [ 3341.083109][T17014] __generic_file_write_iter+0xa1/0x120 [ 3341.088661][T17014] generic_file_write_iter+0x7d/0x1c0 [ 3341.094045][T17014] vfs_write+0x4ab/0x7d0 [ 3341.098302][T17014] ksys_write+0xeb/0x1a0 [ 3341.102555][T17014] __x64_sys_write+0x42/0x50 [ 3341.107167][T17014] do_syscall_64+0x41/0xc0 [ 3341.111599][T17014] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3341.111629][T17014] [ 3341.111635][T17014] read to 0xffff888100130b50 of 8 bytes by task 17014 on cpu 0: [ 3341.127463][T17014] __percpu_counter_compare+0x2b/0x1d0 14:58:56 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xc}}, 0xfffffdef) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x3, 0x8, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x4008051) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0}, 0x4008051) (async) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3341.132948][T17014] shmem_get_folio_gfp+0x722/0x1200 [ 3341.138172][T17014] shmem_write_begin+0xa6/0x1d0 [ 3341.143069][T17014] generic_perform_write+0x1cf/0x410 [ 3341.148373][T17014] __generic_file_write_iter+0xa1/0x120 [ 3341.153938][T17014] generic_file_write_iter+0x7d/0x1c0 [ 3341.159329][T17014] vfs_write+0x4ab/0x7d0 [ 3341.163578][T17014] ksys_write+0xeb/0x1a0 [ 3341.167829][T17014] __x64_sys_write+0x42/0x50 [ 3341.172434][T17014] do_syscall_64+0x41/0xc0 [ 3341.176860][T17014] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3341.182771][T17014] [ 3341.185095][T17014] value changed: 0x0000000000001a20 -> 0x0000000000001a40 [ 3341.192197][T17014] [ 3341.194521][T17014] Reported by Kernel Concurrency Sanitizer on: [ 3341.200669][T17014] CPU: 0 PID: 17014 Comm: syz-executor.1 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3341.211083][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3341.221145][T17014] ================================================================== 14:58:56 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xc}}, 0xfffffdef) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x4008051) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x81800) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/255) accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) 14:58:56 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) 14:58:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) 14:58:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x4008051) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x81800) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/255) accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) 14:58:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x4008051) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x81800) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/255) accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) 14:58:57 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x406c6, 0xfffffffe, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4, 0x40}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x70f1) ioctl$KDDISABIO(r1, 0x4b37) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x1, 0x5}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x408402, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x40) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/156) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x406c6, 0xfffffffe, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4, 0x40}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x70f1) ioctl$KDDISABIO(r1, 0x4b37) 14:58:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x1, 0x5}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x408402, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x40) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/156) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x406c6, 0xfffffffe, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4, 0x40}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x70f1) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x406c6, 0xfffffffe, 0x2, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4, 0x40}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) (async) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x70f1) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 14:58:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) (async, rerun: 64) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) (rerun: 64) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) (async) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x40) (rerun: 64) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/156) 14:58:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x1, 0x5}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x408402, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)=0x1) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x4200) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x6, 0xe8, 0x2, 0xf, "a15aba33e533dacc424479bef823b0c72bb075"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x4200) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x6, 0xe8, 0x2, 0xf, "a15aba33e533dacc424479bef823b0c72bb075"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x4200) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x6, 0xe8, 0x2, 0xf, "a15aba33e533dacc424479bef823b0c72bb075"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4, 0x8, 0x3f}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x10000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3f}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7ffe, 0x9, 0x5, 0x6, 0xff, "9eab96a3dc90ea601f599d8bf5e8381e417c28", 0x80000000, 0x2a2b}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x29e}, 0x1c, 0x0}, 0x4008051) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x4200) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x6, 0xe8, 0x2, 0xf, "a15aba33e533dacc424479bef823b0c72bb075"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x4200) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x6, 0xe8, 0x2, 0xf, "a15aba33e533dacc424479bef823b0c72bb075"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=0x17) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffff801, 0x511240) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x1f, 0x0, 0x3ff}, {{0x0, 0xea60}, 0x1f, 0x2, 0x7ff}, {{0x77359400}, 0x3, 0x8, 0x8000}, {{r5, r6/1000+10000}, 0x1, 0x7, 0x6}, {{0x77359400}, 0x14, 0x3fa, 0x8c000000}, {{0x0, 0xea60}, 0x14, 0x0, 0x80}, {{}, 0x16, 0xb2, 0x800}, {{r7, r8/1000+60000}, 0xd, 0x0, 0x6}, {{}, 0x0, 0xef51}, {{0x0, 0xea60}, 0x1d}], 0xf0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x6c, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000540)) 14:58:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=0x17) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffff801, 0x511240) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x1f, 0x0, 0x3ff}, {{0x0, 0xea60}, 0x1f, 0x2, 0x7ff}, {{0x77359400}, 0x3, 0x8, 0x8000}, {{r5, r6/1000+10000}, 0x1, 0x7, 0x6}, {{0x77359400}, 0x14, 0x3fa, 0x8c000000}, {{0x0, 0xea60}, 0x14, 0x0, 0x80}, {{}, 0x16, 0xb2, 0x800}, {{r7, r8/1000+60000}, 0xd, 0x0, 0x6}, {{}, 0x0, 0xef51}, {{0x0, 0xea60}, 0x1d}], 0xf0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x6c, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000540)) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=0x17) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) (async) syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffff801, 0x511240) (async) clock_gettime(0x0, &(0x7f0000000380)) (async) clock_gettime(0x0, &(0x7f00000003c0)) (async) write$evdev(r4, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x1f, 0x0, 0x3ff}, {{0x0, 0xea60}, 0x1f, 0x2, 0x7ff}, {{0x77359400}, 0x3, 0x8, 0x8000}, {{r5, r6/1000+10000}, 0x1, 0x7, 0x6}, {{0x77359400}, 0x14, 0x3fa, 0x8c000000}, {{0x0, 0xea60}, 0x14, 0x0, 0x80}, {{}, 0x16, 0xb2, 0x800}, {{r7, r8/1000+60000}, 0xd, 0x0, 0x6}, {{}, 0x0, 0xef51}, {{0x0, 0xea60}, 0x1d}], 0xf0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x6c, 0x8) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) (async) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000540)) (async) 14:58:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x29e}, 0x1c, 0x0}, 0x4008051) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x80000) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0xb75, 0x9, 0x0, 0x20, 0x4c, "b49fe2175254f26548a47aa1207323ba056528", 0x9, 0xfffffffc}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x50000) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4, 0x8, 0x3f}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x10000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3f}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7ffe, 0x9, 0x5, 0x6, 0xff, "9eab96a3dc90ea601f599d8bf5e8381e417c28", 0x80000000, 0x2a2b}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4, 0x8, 0x3f}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x10000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3f}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7ffe, 0x9, 0x5, 0x6, 0xff, "9eab96a3dc90ea601f599d8bf5e8381e417c28", 0x80000000, 0x2a2b}) (async) 14:58:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) syz_open_pts(r0, 0x10000) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4, 0x8, 0x3f}) (async, rerun: 32) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x10000000, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x3f}) (async, rerun: 32) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x7ffe, 0x9, 0x5, 0x6, 0xff, "9eab96a3dc90ea601f599d8bf5e8381e417c28", 0x80000000, 0x2a2b}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x80000) ioctl$TCFLSH(r1, 0x540b, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0xb75, 0x9, 0x0, 0x20, 0x4c, "b49fe2175254f26548a47aa1207323ba056528", 0x9, 0xfffffffc}) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x50000) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)=0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000080)=""/23, &(0x7f00000000c0)=0x17) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) (async, rerun: 32) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffff801, 0x511240) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) (async, rerun: 64) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) (rerun: 64) write$evdev(r4, &(0x7f0000000400)=[{{0x0, 0x2710}, 0x1f, 0x0, 0x3ff}, {{0x0, 0xea60}, 0x1f, 0x2, 0x7ff}, {{0x77359400}, 0x3, 0x8, 0x8000}, {{r5, r6/1000+10000}, 0x1, 0x7, 0x6}, {{0x77359400}, 0x14, 0x3fa, 0x8c000000}, {{0x0, 0xea60}, 0x14, 0x0, 0x80}, {{}, 0x16, 0xb2, 0x800}, {{r7, r8/1000+60000}, 0xd, 0x0, 0x6}, {{}, 0x0, 0xef51}, {{0x0, 0xea60}, 0x1d}], 0xf0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x6c, 0x8) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$KDGETLED(r9, 0x4b31, &(0x7f0000000540)) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x29e}, 0x1c, 0x0}, 0x4008051) 14:58:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xc, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:57 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x408282, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x43, 0x1, 0x1, 0xe, 0x0, 0x800}, &(0x7f00000000c0)=0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x4, @private2, 0x42}, 0x1c, 0x0}, 0x20000895) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x6, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @timestamp, @mss={0x2, 0x401}, @timestamp, @mss={0x2, 0xffff}], 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x80000) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x80000) ioctl$TCFLSH(r1, 0x540b, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0xb75, 0x9, 0x0, 0x20, 0x4c, "b49fe2175254f26548a47aa1207323ba056528", 0x9, 0xfffffffc}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x50000) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x408282, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x43, 0x1, 0x1, 0xe, 0x0, 0x800}, &(0x7f00000000c0)=0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:57 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 14:58:57 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x4, @private2, 0x42}, 0x1c, 0x0}, 0x20000895) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201000, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x6, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @timestamp, @mss={0x2, 0x401}, @timestamp, @mss={0x2, 0xffff}], 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 14:58:57 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x4, @private2, 0x42}, 0x1c, 0x0}, 0x20000895) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x6, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @timestamp, @mss={0x2, 0x401}, @timestamp, @mss={0x2, 0xffff}], 0x5) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e24, 0x4, @private2, 0x42}, 0x1c, 0x0}, 0x20000895) (async) pipe(&(0x7f0000000000)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x201000, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x6, 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@mss, @timestamp, @mss={0x2, 0x401}, @timestamp, @mss={0x2, 0xffff}], 0x5) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, 0x0) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x408282, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x43, 0x1, 0x1, 0xe, 0x0, 0x800}, &(0x7f00000000c0)=0x20) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffe, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/101) 14:58:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1f, 0x0, 0x0, "5a755b38bfb6ab3f1472be15d197df00"}) 14:58:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 14:58:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1f, 0x0, 0x0, "5a755b38bfb6ab3f1472be15d197df00"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1f, 0x0, 0x0, "5a755b38bfb6ab3f1472be15d197df00"}) (async) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffe, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) getpid() (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/101) 14:58:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f3301, 0x408) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1f, 0x0, 0x0, "5a755b38bfb6ab3f1472be15d197df00"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x1f, 0x0, 0x0, "5a755b38bfb6ab3f1472be15d197df00"}) 14:58:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffe, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/101) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0xfffffffe, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) (async) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) getpid() (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000000c0)=""/101) (async) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/71) socket$inet6(0x10, 0x3, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000240), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x7fffffff, 0x3, 0x47, 0x7, 0x9a3, 0x8}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000300)=[0x8, 0x2]) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) write$evdev(r4, &(0x7f0000000280)=[{{}, 0x1f, 0x8, 0x20}, {{0x77359400}, 0x2, 0x9, 0x37}], 0x30) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)="8836c7fd012f104b8a0f", 0xa) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x40000}, 0x1c, 0x0}, 0x4008051) r6 = syz_open_pts(r3, 0x8000) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000180)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="73020081008000002000000001cbd2f601aae90948c8ba3af6cd40ea4a6a93bbe6a7562011d1093a52ef3cdf2ebd6698702180e66a9a77fa0a4e757e04fc5ef52a9dccfc7ddc2a8d79f9863f4f6a6d0590c54e46da6e3ddbef1d86de58bbf22a822cd3fa6ed207c0fd20b4693a52c668cb155ad6ed600100000070f2f11e819fefeca467d28760069a3cbe254fa77605ed1039e71ae202bcc3815575edc6365583cd"], 0x18) 14:58:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xec5f, 0xa, "f3d5b21f60140b5912653b609b2c323f72ed40", 0x7, 0xfffffff8}) 14:58:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xc, 0x0, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x9, 0x7, 0x8e0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x1, 0xf2, 0xff, 0x401, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x301820) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)={0x3a, 0x1f, &(0x7f00000005c0)}) 14:58:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 32) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xec5f, 0xa, "f3d5b21f60140b5912653b609b2c323f72ed40", 0x7, 0xfffffff8}) (rerun: 32) 14:58:58 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/71) socket$inet6(0x10, 0x3, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000240), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x7fffffff, 0x3, 0x47, 0x7, 0x9a3, 0x8}) (async) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x7fffffff, 0x3, 0x47, 0x7, 0x9a3, 0x8}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000300)=[0x8, 0x2]) (async) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000300)=[0x8, 0x2]) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) write$evdev(r4, &(0x7f0000000280)=[{{}, 0x1f, 0x8, 0x20}, {{0x77359400}, 0x2, 0x9, 0x37}], 0x30) (async) write$evdev(r4, &(0x7f0000000280)=[{{}, 0x1f, 0x8, 0x20}, {{0x77359400}, 0x2, 0x9, 0x37}], 0x30) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)="8836c7fd012f104b8a0f", 0xa) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x40000}, 0x1c, 0x0}, 0x4008051) r6 = syz_open_pts(r3, 0x8000) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000180)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="73020081008000002000000001cbd2f601aae90948c8ba3af6cd40ea4a6a93bbe6a7562011d1093a52ef3cdf2ebd6698702180e66a9a77fa0a4e757e04fc5ef52a9dccfc7ddc2a8d79f9863f4f6a6d0590c54e46da6e3ddbef1d86de58bbf22a822cd3fa6ed207c0fd20b4693a52c668cb155ad6ed600100000070f2f11e819fefeca467d28760069a3cbe254fa77605ed1039e71ae202bcc3815575edc6365583cd"], 0x18) 14:58:58 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="ccb4309b7840ebc35daff5df0183be3c", 0x10) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x9, 0x7, 0x8e0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x1, 0xf2, 0xff, 0x401, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x1, 0xf2, 0xff, 0x401, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x301820) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)={0x3a, 0x1f, &(0x7f00000005c0)}) 14:58:58 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 14:58:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x6, 0x4, 0xec5f, 0xa, "f3d5b21f60140b5912653b609b2c323f72ed40", 0x7, 0xfffffff8}) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/71) (rerun: 64) socket$inet6(0x10, 0x3, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000140)=0x1) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 32) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000240), 0x4) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x7fffffff, 0x3, 0x47, 0x7, 0x9a3, 0x8}) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000300)=[0x8, 0x2]) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) (async, rerun: 32) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async, rerun: 32) write$evdev(r4, &(0x7f0000000280)=[{{}, 0x1f, 0x8, 0x20}, {{0x77359400}, 0x2, 0x9, 0x37}], 0x30) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)="8836c7fd012f104b8a0f", 0xa) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1, 0x40000}, 0x1c, 0x0}, 0x4008051) r6 = syz_open_pts(r3, 0x8000) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000180)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="73020081008000002000000001cbd2f601aae90948c8ba3af6cd40ea4a6a93bbe6a7562011d1093a52ef3cdf2ebd6698702180e66a9a77fa0a4e757e04fc5ef52a9dccfc7ddc2a8d79f9863f4f6a6d0590c54e46da6e3ddbef1d86de58bbf22a822cd3fa6ed207c0fd20b4693a52c668cb155ad6ed600100000070f2f11e819fefeca467d28760069a3cbe254fa77605ed1039e71ae202bcc3815575edc6365583cd"], 0x18) 14:58:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000001c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe(&(0x7f0000000100)) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x9, 0x7, 0x8e0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x1, 0xf2, 0xff, 0x401, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x301820) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)={0x3a, 0x1f, &(0x7f00000005c0)}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x1, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10001, 0x9, 0x7, 0x8e0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2}, 0x48) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x1, 0xf2, 0xff, 0x401, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0x2, 0x5}, 0x48) (async) syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x301820) (async) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000001c0)={0x3a, 0x1f, &(0x7f00000005c0)}) (async) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="19090000000000000a004e2200000006fc0200000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025868c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000a004e2400000004fc01000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fc0000000000000000000000000000008100000000000000000000000000000000000000000000000000b904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000003fff01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000006ff010000000000000000000000000001ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010a004e2100000003fe8800000000000000000000000001017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209a9deba69962fefeead25aa6b18b0000000000000000000000000000000000000000000000000000000000000000000000000a004e220000010000000000000000000000ffffac1414bbd08d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20fffffffafe8000000000000000000000000000bbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000003fffe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fc02000000000000000000000000000114010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000620010000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e197ad9e15f814110e6cb3c1ec747496e2222f50531447c7a9424612756218efbead9dd77243c37436675fc966282a2fec890a19c9d8759ac99cd1517bf84dd0229b5797da33b44a9207a8bc7241ef25f162c3eb7375f828d1e53b7e3c034e72f4e66419c6f79e0c937c2733adfc338e7db0a8ebfff8e32a9f8ae0ded211484519a616d17795fa8edf2ec65a662d5c7d15717d4d63577445ae7e77839e5e5038f6d681b97ed63232d23883dc69fe21eeb3775044c762582c7f14afbe761530f097"], 0x590) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x100, 0x3, 0x1, 0x3, 0x1, 0xa9}, &(0x7f0000000040)=0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x9d3, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000200)=""/228, &(0x7f0000000180)=0xe4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x0, 0x3, 0x0, 0x8, 0xffff}, &(0x7f0000000140)=0x20) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) 14:58:58 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="ccb4309b7840ebc35daff5df0183be3c", 0x10) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="ccb4309b7840ebc35daff5df0183be3c", 0x10) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) (async) 14:58:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000001c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe(&(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x4) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000001c0)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) pipe(&(0x7f0000000100)) (async) 14:58:58 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="ccb4309b7840ebc35daff5df0183be3c", 0x10) (async) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) 14:58:58 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="19090000000000000a004e2200000006fc0200000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025868c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000a004e2400000004fc01000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fc0000000000000000000000000000008100000000000000000000000000000000000000000000000000b904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000003fff01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000006ff010000000000000000000000000001ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010a004e2100000003fe8800000000000000000000000001017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209a9deba69962fefeead25aa6b18b0000000000000000000000000000000000000000000000000000000000000000000000000a004e220000010000000000000000000000ffffac1414bbd08d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20fffffffafe8000000000000000000000000000bbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000003fffe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fc02000000000000000000000000000114010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000620010000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e197ad9e15f814110e6cb3c1ec747496e2222f50531447c7a9424612756218efbead9dd77243c37436675fc966282a2fec890a19c9d8759ac99cd1517bf84dd0229b5797da33b44a9207a8bc7241ef25f162c3eb7375f828d1e53b7e3c034e72f4e66419c6f79e0c937c2733adfc338e7db0a8ebfff8e32a9f8ae0ded211484519a616d17795fa8edf2ec65a662d5c7d15717d4d63577445ae7e77839e5e5038f6d681b97ed63232d23883dc69fe21eeb3775044c762582c7f14afbe761530f097"], 0x590) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x100, 0x3, 0x1, 0x3, 0x1, 0xa9}, &(0x7f0000000040)=0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x9d3, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000200)=""/228, &(0x7f0000000180)=0xe4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x0, 0x3, 0x0, 0x8, 0xffff}, &(0x7f0000000140)=0x20) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) 14:58:58 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (rerun: 64) 14:58:58 executing program 3: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x224}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x1c, 0x0, @ib={0x1b, 0xb3, 0xfffffff7, {"f89c98e5a0396ee500a253be7d5e9828"}, 0x2, 0x6, 0x80}}}, 0xa0) socket$inet6_udplite(0xa, 0x2, 0x88) gettid() setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x80000000, {{0xa, 0x4e21, 0x3ff, @remote, 0xffff8001}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x3, @loopback, 0x7}}, {{0xa, 0x4e20, 0x8, @private0, 0x2f}}, {{0xa, 0x4e21, 0x908f, @private1, 0x7fffffff}}, {{0xa, 0x4e20, 0x6, @private0, 0x4}}, {{0xa, 0x4e24, 0x9, @local, 0x2c}}, {{0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7ff}}, {{0xa, 0x4e24, 0xbe, @mcast1, 0x80000001}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x200}}, {{0xa, 0x4e20, 0x5, @local, 0x8000}}]}, 0x510) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000900)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x5}}, 0x20) 14:58:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="19090000000000000a004e2200000006fc0200000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025868c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000a004e2400000004fc01000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fc0000000000000000000000000000008100000000000000000000000000000000000000000000000000b904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000003fff01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000006ff010000000000000000000000000001ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010a004e2100000003fe8800000000000000000000000001017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209a9deba69962fefeead25aa6b18b0000000000000000000000000000000000000000000000000000000000000000000000000a004e220000010000000000000000000000ffffac1414bbd08d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20fffffffafe8000000000000000000000000000bbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000003fffe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fc02000000000000000000000000000114010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000620010000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e197ad9e15f814110e6cb3c1ec747496e2222f50531447c7a9424612756218efbead9dd77243c37436675fc966282a2fec890a19c9d8759ac99cd1517bf84dd0229b5797da33b44a9207a8bc7241ef25f162c3eb7375f828d1e53b7e3c034e72f4e66419c6f79e0c937c2733adfc338e7db0a8ebfff8e32a9f8ae0ded211484519a616d17795fa8edf2ec65a662d5c7d15717d4d63577445ae7e77839e5e5038f6d681b97ed63232d23883dc69fe21eeb3775044c762582c7f14afbe761530f097"], 0x590) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="19090000000000000a004e2200000006fc0200000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025868c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000a004e2400000004fc01000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000004fc0000000000000000000000000000008100000000000000000000000000000000000000000000000000b904000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000003fff01000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000006ff010000000000000000000000000001ffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010a004e2100000003fe8800000000000000000000000001017f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209a9deba69962fefeead25aa6b18b0000000000000000000000000000000000000000000000000000000000000000000000000a004e220000010000000000000000000000ffffac1414bbd08d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20fffffffafe8000000000000000000000000000bbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000003fffe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000000fc02000000000000000000000000000114010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000620010000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e197ad9e15f814110e6cb3c1ec747496e2222f50531447c7a9424612756218efbead9dd77243c37436675fc966282a2fec890a19c9d8759ac99cd1517bf84dd0229b5797da33b44a9207a8bc7241ef25f162c3eb7375f828d1e53b7e3c034e72f4e66419c6f79e0c937c2733adfc338e7db0a8ebfff8e32a9f8ae0ded211484519a616d17795fa8edf2ec65a662d5c7d15717d4d63577445ae7e77839e5e5038f6d681b97ed63232d23883dc69fe21eeb3775044c762582c7f14afbe761530f097"], 0x590) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x100, 0x3, 0x1, 0x3, 0x1, 0xa9}, &(0x7f0000000040)=0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x9d3, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000200)=""/228, &(0x7f0000000180)=0xe4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x0, 0x3, 0x0, 0x8, 0xffff}, &(0x7f0000000140)=0x20) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x6, 0x0, 0x3, 0x0, 0x8, 0xffff}, &(0x7f0000000140)=0x20) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000000c0)) 14:58:58 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x4) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r3, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) pipe(&(0x7f0000000100)) 14:58:58 executing program 3: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x224}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x1c, 0x0, @ib={0x1b, 0xb3, 0xfffffff7, {"f89c98e5a0396ee500a253be7d5e9828"}, 0x2, 0x6, 0x80}}}, 0xa0) socket$inet6_udplite(0xa, 0x2, 0x88) gettid() setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x80000000, {{0xa, 0x4e21, 0x3ff, @remote, 0xffff8001}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x3, @loopback, 0x7}}, {{0xa, 0x4e20, 0x8, @private0, 0x2f}}, {{0xa, 0x4e21, 0x908f, @private1, 0x7fffffff}}, {{0xa, 0x4e20, 0x6, @private0, 0x4}}, {{0xa, 0x4e24, 0x9, @local, 0x2c}}, {{0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7ff}}, {{0xa, 0x4e24, 0xbe, @mcast1, 0x80000001}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x200}}, {{0xa, 0x4e20, 0x5, @local, 0x8000}}]}, 0x510) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000900)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x224}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) (async) pipe(&(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x1c, 0x0, @ib={0x1b, 0xb3, 0xfffffff7, {"f89c98e5a0396ee500a253be7d5e9828"}, 0x2, 0x6, 0x80}}}, 0xa0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) gettid() (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x80000000, {{0xa, 0x4e21, 0x3ff, @remote, 0xffff8001}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x3, @loopback, 0x7}}, {{0xa, 0x4e20, 0x8, @private0, 0x2f}}, {{0xa, 0x4e21, 0x908f, @private1, 0x7fffffff}}, {{0xa, 0x4e20, 0x6, @private0, 0x4}}, {{0xa, 0x4e24, 0x9, @local, 0x2c}}, {{0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7ff}}, {{0xa, 0x4e24, 0xbe, @mcast1, 0x80000001}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x200}}, {{0xa, 0x4e20, 0x5, @local, 0x8000}}]}, 0x510) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000900)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x5}}, 0x20) (async) 14:58:58 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x200000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 3: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x7, @loopback, 0x224}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r3, 0x1c, 0x0, @ib={0x1b, 0xb3, 0xfffffff7, {"f89c98e5a0396ee500a253be7d5e9828"}, 0x2, 0x6, 0x80}}}, 0xa0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) gettid() (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x80000000, {{0xa, 0x4e21, 0x3ff, @remote, 0xffff8001}}, 0x1, 0x9, [{{0xa, 0x4e23, 0x3, @loopback, 0x7}}, {{0xa, 0x4e20, 0x8, @private0, 0x2f}}, {{0xa, 0x4e21, 0x908f, @private1, 0x7fffffff}}, {{0xa, 0x4e20, 0x6, @private0, 0x4}}, {{0xa, 0x4e24, 0x9, @local, 0x2c}}, {{0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7ff}}, {{0xa, 0x4e24, 0xbe, @mcast1, 0x80000001}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}, 0x200}}, {{0xa, 0x4e20, 0x5, @local, 0x8000}}]}, 0x510) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000900)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r0}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x5}}, 0x20) 14:58:58 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:58 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) syz_open_pts(r0, 0x10000) 14:58:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7df182, 0x408) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x4001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/91) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0xa}}, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xd2c43) r3 = syz_open_pts(r1, 0x400000) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x9564, 0xfff, 0x2}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/154) 14:58:58 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x41) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xffffffff, 0x0, 0xfd, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x2, 0x200, 0x8, 0x9, 0x13, "7009d590afd1268f"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3f, 0x658000) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f00000000c0)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) 14:58:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x200000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:58 executing program 5: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x4028051) 14:58:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7df182, 0x408) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x4001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/91) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0xa}}, 0x2) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xd2c43) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xd2c43) syz_open_pts(r1, 0x400000) (async) r3 = syz_open_pts(r1, 0x400000) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x9564, 0xfff, 0x2}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/154) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/154) 14:58:58 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x41) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xffffffff, 0x0, 0xfd, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async, rerun: 64) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x2, 0x200, 0x8, 0x9, 0x13, "7009d590afd1268f"}) (rerun: 64) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3f, 0x658000) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f00000000c0)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) 14:58:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x200000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x200000, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:58 executing program 5: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) (async) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x4028051) 14:58:58 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x7df182, 0x408) (async) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x4001) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/91) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0xa}}, 0x2) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xd2c43) (async) r3 = syz_open_pts(r1, 0x400000) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x9564, 0xfff, 0x2}) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/154) 14:58:59 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/97, &(0x7f0000000000)=0x61) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x3264cfd1, 0x58]) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x41) ioctl$TCSETSF2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0xffffffff, 0x0, 0xfd, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x2}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x2, 0x200, 0x8, 0x9, 0x13, "7009d590afd1268f"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3f, 0x658000) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f00000000c0)) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) 14:58:59 executing program 5: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x4028051) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x800) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0}, 0x4028051) (async) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KDDISABIO(r1, 0x4b37) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 32) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x3264cfd1, 0x58]) (rerun: 32) 14:58:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c6a237287281d739693618334258b6c4", 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r2, 0x4b2f, 0x810) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x3264cfd1, 0x58]) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) ioctl$VT_WAITACTIVE(r0, 0x5607) (async, rerun: 32) ioctl$KDDISABIO(r1, 0x4b37) (rerun: 32) 14:58:59 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000, 0x12142, &(0x7f0000001080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:59 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KDDISABIO(r1, 0x4b37) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x3}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$KDDISABIO(r1, 0x4b37) (async) 14:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c6a237287281d739693618334258b6c4", 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r2, 0x4b2f, 0x810) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000, 0x12142, &(0x7f0000001080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/97, &(0x7f0000000000)=0x61) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:58:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c6a237287281d739693618334258b6c4", 0x10) (async, rerun: 32) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KIOCSOUND(r2, 0x4b2f, 0x810) (async, rerun: 32) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (rerun: 32) 14:58:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000, 0x12142, &(0x7f0000001080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000, 0x12142, &(0x7f0000001080)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400402, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x7fff, 0x9, 0x2}}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f1472d0aac7d3be15d197df", 0x9}) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x7fff, 0x9, 0x2}}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f1472d0aac7d3be15d197df", 0x9}) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x6, 0x101]) 14:58:59 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x3a}, 0x20000024) socket$inet6_udplite(0xa, 0x2, 0x88) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 64) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x7fff, 0x9, 0x2}}) (rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x802, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f1472d0aac7d3be15d197df", 0x9}) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x6, 0x101]) 14:58:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/97, &(0x7f0000000000)=0x61) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/97, &(0x7f0000000000)=0x61) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) 14:58:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x3a}, 0x20000024) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x6, 0x101]) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x9, 0x401, 0x20, 0x7fff, 0x4, "63fb92c09ee29931"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @request_death], 0x1000, 0x0, &(0x7f00000005c0)="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"}) 14:58:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x3a}, 0x20000024) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x3a}, 0x20000024) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x1, 0xfff9}) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x9, 0x401, 0x20, 0x7fff, 0x4, "63fb92c09ee29931"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @request_death], 0x1000, 0x0, &(0x7f00000005c0)="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"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @request_death], 0x1000, 0x0, &(0x7f00000005c0)="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"}) 14:58:59 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) r3 = syz_open_pts(r0, 0x10000) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000080)) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x7, 0x7fff}) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x1, 0xfff9}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x7, 0x7fff}) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x1, 0xfff9}) (async) 14:58:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) syz_open_pts(r2, 0x400240) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x120, 0x0, &(0x7f0000000800)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/20, 0x14, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/158, 0x9e, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/198, 0xc6, 0x0, 0x2e}, @fda={0x66646185, 0x3, 0x0, 0x3d}}, &(0x7f00000007c0)={0x0, 0x20, 0x48}}}, @dead_binder_done, @increfs={0x40046304, 0x3}], 0xf9, 0x0, &(0x7f0000000940)="ba97ead3f3bcaa3cca62affff2be724e42e1047f139981e34817633d5562fe9243077d9586983a0b102cb3b646296ecc6f479a7d9520ebd3447f7b5f26021282a82029dc3acdf0ce92d43a9eb97eeb5d9df57ddfd3837657eb726bca9ce4388a6ed86c12a1cca7b2e56b1eac8a3ec599a7de27edbe24739695a1aa2c245b757483de383a998dfac98a5fd0cf7e10f9f7fd64189ec03108ac278b2022546798324a50f4e140b97396093c4dde044233e6c56ada08cb12a343a7f047763324a2f352bbff81bb0ff13472eade35dfc7ec318a1103a2d9f1c10c0efea21b10118bd0ac002c687d4c9356f6e0b605606ba01b16683d0b3bc6aba797"}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="211300000000000000010001020000240f72525e12323e3f93050200060718000000012c1f000105000000000000000200000000000000c910fc020000000008000000000000000000040105c91020010201050000000000f54599152377650e0b64a49aaf06c45d9da4a581405d2a351dc75d1b114910efeb87caf17dbc7f299737e82470a872a277ac697fbf00"/155], 0xa8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x1}}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000a80), 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x90000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106, 0x1}}, 0x20) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="fd70cccfa63128a21ca95a94a2e3f5b90a4e7d8b845ed33a9b4efc0f36e5a368e7e92b0deec800ccd4388f467001410bd1eb4612ae874e4cb3070a875255873c37742163de0e3720c65508bf92674b6c0635bceb9ffbcdb8af857d0a0835596a515bc637deb9d28f", 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 14:58:59 executing program 5: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8001) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8001) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x9, 0x401, 0x20, 0x7fff, 0x4, "63fb92c09ee29931"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x9, 0x401, 0x20, 0x7fff, 0x4, "63fb92c09ee29931"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @request_death], 0x1000, 0x0, &(0x7f00000005c0)="a0b5e6658452e59ee0036b79521d9e7370a1204c8d251e1074ae8f612bbd083cba810ce4a1dbe773c448c01e4a4e1f801f0c8a54c004425affa13f5f1076b6052328e4de0f22efb58b8b63561aef7bc595ca2c3e9d60add13bb00838fbf9fe60ca0c7f5719795dd62a2d81d8f1ba807c5daeef163bf6c6377321b6e8545725ae830c74cc3e68dc17f3329609b4eba80f7f6549da322552def09342ee91b8964be6cb5d9f21335db1ae6947fe8a332a0d39841f5b623dee7815fdc163460afc662679ec544eca55707fc24e3c0f821a32173b5a947991efa84d64ebd4a2dfa51ab0ffa2e83416af5b1bc200765a450df999073ed24c25c8f8af17f908d92eeab924c0df3c12c148c551b82718dfb49ca8da120a891f19f6cef6d0ff9bb149f77939bdcd094a662c0124f377070e86e014ad3c5c4203fdd12d0f8cd03a9bc9ca2ccd781b2dfd8cca2c1160e9b174101ea9b755b5304251cc60427de37268e672b4f21c8562027733c60fda66b0127575788015cb0682ec9767f340dc454481ce67171d5a0d70ffefd4fd7c519353484dc4cd961e662db08c884eb42050257305eaea3a2b997386272f83aff164e5ae3beaba10917d6cd24dc14a4005bd5d1f9de4ed55951c32a7aed1c987a1bbcee3243d3a0f98c0a8eb6bf517200e3cd7630d4db5a91d48d83a7a9e932a6df04b536d30be53a3018082f58df4901121325cd9457d5edad2be2277c337b62f713ab67969e58ed6a292a276bc9262f51ffd903c0b6beb9f9ff932963ea0791a42676eb66c8b99af92a0fd652660610413e7b72b889aa3d87d9d767bb89b14767a9dff537e16c9f29e8969ff5540dd1943405fa5be5f9ebb398227f0ad63adf6368f0759e356126912872088a7749e3c916e1ab130fa8df96de169605cb0b35f27936401ed74a2711b11b359ef763ddc62090a4e71ecb2752d881d661713b20b3b3fa0389bb41779c8f9205763df8be8ec5ee40f05f63968aaf7c9a978efcc18f778dd9cfb92dd6bd012f9df21f37f6ff612f492a74aafdbd72984025e28ad29c32880738cb2fe844f6d2b186a32d518ffa9e29f53fb1bf2c534dd33a3f73c8f9b555d6a13ca9db93d0fad9b8cc0f819767c361c9fe3d1e2246ce813f57fe09e04a217c25346c57f1931e9dbe3a28c4dbd220d89666c2d82e3a9505880e961d75e58f5b0c48fd97625a3656e2acf941c4fa887b8773ef6050460d12e500e67f5f9f8dd087fd16927da5279f6e67d6349a780878192a1241bb378b321ad9beca64a184e2e5e6c57d0fc6ab2976fe880eefaf05e91cf6690cf6fa8dbe06b4f60ee507227b305c7a2e3b77f557da894f7247321b2552ab839797b402de7663e463cfa62d45c901bc23feb978e319cb8cb115d794645b318edebdcd002cedc9d4412c33e60b8603e69150987b50d501348fd4e362e6a5dc7dd98f8d5955a9c1a243afeaee4cc59648d995e98829f7ee3fcf9edbbf24258685fbaece4bd7e641362b4e759a07457ae7b928a10d7dd2a168d1d7668af6477fd630e5853ac886e0e107d98108f3d47b9102f02659edd4d11fa820aba323a2e236aab35471a28a5e0ff05570622f19d05159897a6d68ec1b30387f38934e8736a7109210ce9b7966098a5b11636f40c2c50b6bcb1deda820e9f008d0143d7c90244d46d73e66b32845ffa8bf943dca798582f58d9a731204969a32fb017e612a382dc66de6f02e1568a2db47b7a95ac3d214c009bc8d55b057ad8aa141304571d142f2155f7eae15017f3a5c17b34b9558909fc8f29f144197aa71ccd8cd2a512b3969d26edcc21031e843def6ec91e7440a692192cf93a27021198e2bdeac293cd38902842fa8e4afcf472cb57edd536d330cce6c3df72e38358c7dcec48be078a52bc0f123506d73f5045f6db3c177681b27c836c17ba442610267aafe33962acd663e09941d489a196d768254504cbdca8bbe3e3a6e99ef975818e22c1d46fe8390580b9cc0da25208290a4c882e39ea8a3b0be8cc5a22ad55c8be9f9d6039ae34600c0a5fc3e3e6fd5882b10867a2796a78d2e1103ac7a1aea313b2bb1b9e9e5d8f2a08f840873f629b0cb897b87ccb5c2edfd5568045a032ae3bfd0d36d058d5c4b4bd757048abc4f0f8437270aeed109ad4ec67d2613f12e403534a9a4a24f8b1d86f9541a408ca194481919947f66a16f2a49661192892a5ef45998258eebbe6bf0092378163fc736d3f4e0584d2b8cf1f5adfb35a5c5a6db8100b06c221af00cfb4a07db7f6479628954c86271c94da711d63484ed58e8774603804f40f7a8811de0831df7e25be0b470948c6fb0b6ee67f1725d1838e51caaa7dad6385c98d796147ba4b53e1cf22027a705001734adc5de4e29bbfc970d96fc485924842dee79357da6ba0456657fce6567168b19afeea5770be66f1b88bbddf2bd14dafb292fb87f139ccf8b5c50550c13036360365b8c9ab430e32ecd0f42c022986ec6918976bb618eb5148e42f093a87871586a38e3f84104839c634cf0c75b5835a83803f1eec325ccb0c27dffae3f3797dd2580a90deab48377a312b94341b245d4986f586ecec46dc0d2085f1d6a3a4ee57ae945c98b2590d118771976b1ab4f30dc7093b2fca4e011ce8ecca608fcb1e3f2ac1f8b9f75e121423fa3b5f3abebabac73e3e6666d3137df53e7fad449ba193b40a193034f017077cf6099c15fe8c33b1e00e6222c6f559a9b87fb3809352b05159d42b3da41abebb6ac081fba3bd835c1264bc22ec05bf4b16863a0745c4c64bfe4e9b017bc6c0163b35490247cc923340bfe112543d59ddd0c1ab087909929538e426ebaf4e86d887dabfaa6a3cb6bd32c66bfe4b383c38582366ecb4c1f752e4f18e636eb310e8819043e9bbe721910252236a0da1bc783c36aeef1ffb2d659179e68de0ffdebee3fb98815008a7da504b171e0ee44433c8e311ff78533d1edc75cc8c1ef5180b2ebcc22f7969a2152405a443764a0654f9e245592b4fc8fa2fdc9d6edd32046f32871485887cf7afbf039dc2c2785796b4938355a5d4ad5f5d9f578ff87802c28fc0d89b0081609347429b9430638447cafc8e6ececeab8d909369be7c33ae6ab4be41d530942164f1d68b22843b425308f1e79e8f7d2fa0bf5ab392b0737920831a7b4a81cdd6a5542f2d192639d2071f84fc450db6b2114b659164a0a607035b7d2530d20782f4ddf23079cd7f708952f72ac11db41814a115622bc7bb12acfcddb6af2f92a88ba9bf5c2ea9d50b0cced801ac9b56e60ce97310895bc62c79576708fc9ed28e28ed83b3b28596c5e30ea42ccfb7546d60a3fc8e2650fab4385fcb0c97ece26bd48a938eb7de67d9481569434a44000c3155a815ed7c3d7ed6606f98c9b4afd007181b0ef939e959e46a167a8d025ad4023f9eaee6fa3ca9822be9afa7b2ee5aa2e64a8b9e6b069988b466647d8a5830f5f0dff4f4a242eaf6de36164362dc95b5c9c05eb7bf981c9b34154e0df36fbee25dabcee934995e3c8e672ba6594a456edf26c186a52e69b8a0315f16eb1482e1bf85631e312eb5c911bb99fbd141679320ae87575afa50bf820ffeb8828258dbc80930d4948b3bdb49d4f2cd7fa1102a785d374e318706283237e5fb73f6dea7d944c1d8f56aeb464218db49792d8926cbca8565c7b4a4fd3a037082053067c60d146f62010c6e4cbece4e960b6d11a0270ffada5f8d330c5cc6b8c059e43450c618f7fc6aee505bd85852ff3166910f837912238f39b5ba0d0f5eb8c5e2146181ffa8eff918a83ddf0297cb95aa35254d56bcbcca3e6f72653ce928faef0d3718b2d6aa938411c7447695dde62d6d54fb95236b3ea897e4d9248f42922ad6c591662f3be9c4074f22489bd78aea1e7ee5fa6e90618b3013d011bdd07a06a9a30e37b5baffa8f0f87879cc5f974ca8ca235a199481b57580c5a02a68ca7ccff827896c048a0864047ec4e42e4da4e649b2532bb50fd7df43cc3173814bae42d0852befe7c1aba88a43ad8166c94a9c32d6075ee711c8720bca3f5de9ff2c3fd48c5c2f260bceb8ff7b60334289882544b93d8e3ce27295c044e88f6c4b2481b3b5893bc296713930ea1275e753026fdd0f2347a0d276fb1e33da05ed5518727a8394026ee9bcb20d22150bfc8a530a02e534b12e85bffcb7e10cd24e1f030ad921db7d0db77f77cf3e72d4d60a65c498caa66ab5126dcc263188c0daddf35ec3fc1082a0a8bd7ef75371ee44f16232efe0a060692543a871659dd69e315fec5e1d94e168cd0b0e5bfc80b86fbfd5a990ed9ad521c09830a55edcf657b7c74198aa184fbbd76cac54b6dce38d455f3198b886402c9ca7a3991accd1d79e0b8743f5813d5f4f6e146daaf7d7cccb901c21f746b195152b6349bca2c46d7b4c2b5cb83a258f16c79184c7643b2e2a66c05f8314b48a215b8e3a0e7918b6c4e164ed4dea1222c81d4ddf9536b60e0d5c4ffa11ecd86c4a9c9a6c68d00ee9de31a94922d1fb3c0bbdbc3e360e237f1adf3f3e4408f9c9238db9ed109298102df11a18165497b33af30bba8530a2debc31a332e81cb6dc9beb8cd395f6332dba3fb58ab1c1a3d5a362c8a57f8387f2416e03e23c0f3412d95d778b07b22ab32605c4b3ee89905a81cd808874fc686b48678439b4d951aba63c7e7397e6a8b25fcd0cc142c44469a5d260741bf4badd84251c3c2ecd838e646e518578461e76b81b25c3ffe7c229f1a3f6c6e2b5a35bc2bd8a6d3e63119eeb7f81e47f67c852d275332b58ad00b03d0623dcc288015bb924174fb6d1cfa7448c485624f1cd05aafa5ee8e8ef183f9286600dfff2a8665baa2b164178a022faa7601a1008b801bd502cd42500d49a17f327dd1aea36d8337a647f5080b80d057dc9877e94f722ac59b4cb9a742f0598db8d344d43d421985236d456a5917926d0b44fa3159ded033ee459bb24de4c4ed41b77e60bdd872f2a1cc5adf862754b9f81fc808571dd0ab3e886773f7e1dcf8c6a9aa112afb4073108a9e7a0b716197e846294474b886f5340a51532e7082b1d0cbce66bbcb2182365d768ac7957d672f991fddccf97d1e2e8184db16e2c4be366a5f7668a0fd8ea0b05646050e76c9a155b64b854d5baae1ba7011fcbdeaaf9da7d6437d787287c0521c52ecec1496eab82b9b9e0b923fabdc167068da614f1e0ff32087f1265db92176e291cb4e6361f7bd9d0ca4671e2ee20977ed8ef900e150b12e8d48491da71241ad796eac57a3ce380de57b2255fd61cba760fcfd5960290ecb9c222896cb937e04efe516127169cae66fa9803fc4084bf68c7599674af4a865923aa495238f546949029e8e9408347f5f5bcb9d8733e96a8356d3308deb80aa3058cbd4af22d8f7008a1ab89797a2c3923dca621491ffe7f54f20a25380a92372507b9138529c2cb0e82f3b7f1a2b21a9877f1cdae16980b811dba9f17791585cf1006d4c5252881c34789c36f6d57211ab0159d9ef98ef4bad2b4ed238958cd249c3c3fe8d08153cb721b286d71640dea3654353e48e50a987494a9e3c777739664de3f37eb8feb95f21465765945517e372e8a9f92fe30530e58dcfd02317d2c8c04fb502c84a91dc46e11f39472da3ba7fac405cad11b87d3f0e956ff6c823910d73caf8dee891d545b1dec2682babf6d1ce854a227f88e91d7c134158f57cc55432f1381fd5f8ac201f68ec0523f5ae1fb76265ef61a2ea71c10c75a6d7ecd28361e58c4bf4fb63aebfc8f5c4c02c6b1e671158da2be76a17d39bdc7be015b"}) 14:58:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 5: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x7, 0x7fff}) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x5, 0x1, 0xfff9}) 14:58:59 executing program 5: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) syz_open_pts(r0, 0x10000) 14:58:59 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3f, 0x0, 0x2, 0x5, 0x4}, &(0x7f00000000c0)=0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:59 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) syz_open_pts(r2, 0x400240) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x120, 0x0, &(0x7f0000000800)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/20, 0x14, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/158, 0x9e, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/198, 0xc6, 0x0, 0x2e}, @fda={0x66646185, 0x3, 0x0, 0x3d}}, &(0x7f00000007c0)={0x0, 0x20, 0x48}}}, @dead_binder_done, @increfs={0x40046304, 0x3}], 0xf9, 0x0, &(0x7f0000000940)="ba97ead3f3bcaa3cca62affff2be724e42e1047f139981e34817633d5562fe9243077d9586983a0b102cb3b646296ecc6f479a7d9520ebd3447f7b5f26021282a82029dc3acdf0ce92d43a9eb97eeb5d9df57ddfd3837657eb726bca9ce4388a6ed86c12a1cca7b2e56b1eac8a3ec599a7de27edbe24739695a1aa2c245b757483de383a998dfac98a5fd0cf7e10f9f7fd64189ec03108ac278b2022546798324a50f4e140b97396093c4dde044233e6c56ada08cb12a343a7f047763324a2f352bbff81bb0ff13472eade35dfc7ec318a1103a2d9f1c10c0efea21b10118bd0ac002c687d4c9356f6e0b605606ba01b16683d0b3bc6aba797"}) (rerun: 32) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="211300000000000000010001020000240f72525e12323e3f93050200060718000000012c1f000105000000000000000200000000000000c910fc020000000008000000000000000000040105c91020010201050000000000f54599152377650e0b64a49aaf06c45d9da4a581405d2a351dc75d1b114910efeb87caf17dbc7f299737e82470a872a277ac697fbf00"/155], 0xa8) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x1}}, 0x20) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000a80), 0x4) (async, rerun: 64) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x90000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106, 0x1}}, 0x20) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="fd70cccfa63128a21ca95a94a2e3f5b90a4e7d8b845ed33a9b4efc0f36e5a368e7e92b0deec800ccd4388f467001410bd1eb4612ae874e4cb3070a875255873c37742163de0e3720c65508bf92674b6c0635bceb9ffbcdb8af857d0a0835596a515bc637deb9d28f", 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 14:58:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3f, 0x0, 0x2, 0x5, 0x4}, &(0x7f00000000c0)=0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3f, 0x0, 0x2, 0x5, 0x4}, &(0x7f00000000c0)=0x20) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) 14:58:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xf6, 0x1, 0x4, 0x40, 0xc, "47c758859cfd17e1d57a0b6ec0cf6057223990"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:58:59 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:58:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:58:59 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) syz_open_pts(r2, 0x400240) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x120, 0x0, &(0x7f0000000800)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/20, 0x14, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/158, 0x9e, 0x0, 0x34}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x5, 0x2, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/198, 0xc6, 0x0, 0x2e}, @fda={0x66646185, 0x3, 0x0, 0x3d}}, &(0x7f00000007c0)={0x0, 0x20, 0x48}}}, @dead_binder_done, @increfs={0x40046304, 0x3}], 0xf9, 0x0, &(0x7f0000000940)="ba97ead3f3bcaa3cca62affff2be724e42e1047f139981e34817633d5562fe9243077d9586983a0b102cb3b646296ecc6f479a7d9520ebd3447f7b5f26021282a82029dc3acdf0ce92d43a9eb97eeb5d9df57ddfd3837657eb726bca9ce4388a6ed86c12a1cca7b2e56b1eac8a3ec599a7de27edbe24739695a1aa2c245b757483de383a998dfac98a5fd0cf7e10f9f7fd64189ec03108ac278b2022546798324a50f4e140b97396093c4dde044233e6c56ada08cb12a343a7f047763324a2f352bbff81bb0ff13472eade35dfc7ec318a1103a2d9f1c10c0efea21b10118bd0ac002c687d4c9356f6e0b605606ba01b16683d0b3bc6aba797"}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="211300000000000000010001020000240f72525e12323e3f93050200060718000000012c1f000105000000000000000200000000000000c910fc020000000008000000000000000000040105c91020010201050000000000f54599152377650e0b64a49aaf06c45d9da4a581405d2a351dc75d1b114910efeb87caf17dbc7f299737e82470a872a277ac697fbf00"/155], 0xa8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x111, 0x1}}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000a80), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000a80), 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x90000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106, 0x1}}, 0x20) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="fd70cccfa63128a21ca95a94a2e3f5b90a4e7d8b845ed33a9b4efc0f36e5a368e7e92b0deec800ccd4388f467001410bd1eb4612ae874e4cb3070a875255873c37742163de0e3720c65508bf92674b6c0635bceb9ffbcdb8af857d0a0835596a515bc637deb9d28f", 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 14:59:00 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:00 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) syz_open_pts(r0, 0x10000) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3f, 0x0, 0x2, 0x5, 0x4}, &(0x7f00000000c0)=0x20) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xf6, 0x1, 0x4, 0x40, 0xc, "47c758859cfd17e1d57a0b6ec0cf6057223990"}) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="5e50d1d660f6746edfe54c3b7ca2fe72adaf6ffdff7cc6fce4b86309904511d1298f0a79b0a826ddf5f93936f168a5f4478ef5c07cca119c14be409536fa8a5dfb4cd87eb6fc76f7a00318ec3b2f45f9572d1d24d396eac60d25963e356678b2871767c3d6eda73d43046198d8b412575c5df6512d72392a03554747e548efa25a97d2b56ec81697616fca54c10ab8f7a47de2e62b4cd8738a465c6ac9d470d8be842ae5a97ca0e43be5d3404599040a832347c1aca0106e3a57a06cfcf83b7086d170bf2e2aaed73b9ce8", &(0x7f0000000140)=@udp=r2, 0x4}, 0x20) 14:59:00 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xf6, 0x1, 0x4, 0x40, 0xc, "47c758859cfd17e1d57a0b6ec0cf6057223990"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x80, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2}) 14:59:00 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="5e50d1d660f6746edfe54c3b7ca2fe72adaf6ffdff7cc6fce4b86309904511d1298f0a79b0a826ddf5f93936f168a5f4478ef5c07cca119c14be409536fa8a5dfb4cd87eb6fc76f7a00318ec3b2f45f9572d1d24d396eac60d25963e356678b2871767c3d6eda73d43046198d8b412575c5df6512d72392a03554747e548efa25a97d2b56ec81697616fca54c10ab8f7a47de2e62b4cd8738a465c6ac9d470d8be842ae5a97ca0e43be5d3404599040a832347c1aca0106e3a57a06cfcf83b7086d170bf2e2aaed73b9ce8", &(0x7f0000000140)=@udp=r2, 0x4}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) pipe(&(0x7f0000000100)) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="5e50d1d660f6746edfe54c3b7ca2fe72adaf6ffdff7cc6fce4b86309904511d1298f0a79b0a826ddf5f93936f168a5f4478ef5c07cca119c14be409536fa8a5dfb4cd87eb6fc76f7a00318ec3b2f45f9572d1d24d396eac60d25963e356678b2871767c3d6eda73d43046198d8b412575c5df6512d72392a03554747e548efa25a97d2b56ec81697616fca54c10ab8f7a47de2e62b4cd8738a465c6ac9d470d8be842ae5a97ca0e43be5d3404599040a832347c1aca0106e3a57a06cfcf83b7086d170bf2e2aaed73b9ce8", &(0x7f0000000140)=@udp=r2, 0x4}, 0x20) (async) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="5e50d1d660f6746edfe54c3b7ca2fe72adaf6ffdff7cc6fce4b86309904511d1298f0a79b0a826ddf5f93936f168a5f4478ef5c07cca119c14be409536fa8a5dfb4cd87eb6fc76f7a00318ec3b2f45f9572d1d24d396eac60d25963e356678b2871767c3d6eda73d43046198d8b412575c5df6512d72392a03554747e548efa25a97d2b56ec81697616fca54c10ab8f7a47de2e62b4cd8738a465c6ac9d470d8be842ae5a97ca0e43be5d3404599040a832347c1aca0106e3a57a06cfcf83b7086d170bf2e2aaed73b9ce8", &(0x7f0000000140)=@udp=r2, 0x4}, 0x20) 14:59:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3243, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x80) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) syz_open_pts(r0, 0x10000) 14:59:00 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x2, 0x2, 0x2, 0x1f, 0x7}, &(0x7f00000000c0)=0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x80, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2}) 14:59:00 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) 14:59:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3243, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x80) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x3, 0x400, 0x9, 0x0, 0x7, "502b363dafac156ce1ab7a952ac0a4ed9335e1", 0xff, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x80, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x2}) 14:59:00 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x2, 0x2, 0x2, 0x1f, 0x7}, &(0x7f00000000c0)=0x20) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3243, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x80) 14:59:00 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x2, 0x2, 0x2, 0x1f, 0x7}, &(0x7f00000000c0)=0x20) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140)={0xffffffffffffffff}, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000011c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x80, 0x7f}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0xfffffffd, 0x0, "5a755b38bf0200000000000300000015d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0xbe62, 0xd9f0, 0x5469}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x88000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x4, 0xfd, &(0x7f0000000040)="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"}) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x3, 0x400, 0x9, 0x0, 0x7, "502b363dafac156ce1ab7a952ac0a4ed9335e1", 0xff, 0x5}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8}) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) (async) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x80, 0x7f}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0xfffffffd, 0x0, "5a755b38bf0200000000000300000015d197df"}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async, rerun: 64) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0xbe62, 0xd9f0, 0x5469}) (rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x88000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x4, 0xfd, &(0x7f0000000040)="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"}) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xa, 0x1000000, 0x0, 0x8001, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x8}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x88000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x4, 0xfd, &(0x7f0000000040)="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"}) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x80, 0x7f}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x3, 0x1000000, 0x0, 0xfffffffd, 0x0, "5a755b38bf0200000000000300000015d197df"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000000)={0xbe62, 0xd9f0, 0x5469}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xffffffff, 0x1000000, 0x0, 0x0, 0x0, "5a755b33bfb6ab3f147250aac5d3be0ac397df"}) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x3, 0x400, 0x9, 0x0, 0x7, "502b363dafac156ce1ab7a952ac0a4ed9335e1", 0xff, 0x5}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xffffffff, 0x1000000, 0x0, 0x0, 0x0, "5a755b33bfb6ab3f147250aac5d3be0ac397df"}) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x70) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x7fff, 0x0, 0x9, 0x1b, "7e16f7fc67007086"}) 14:59:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x4, 0x5, {"2bee5d508229fff66bbdd9262ce5319d"}, 0xfffffffffffffffa, 0x9243, 0x800000000000029d}}}, 0xa0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x3, 0x7f, 0x1}) 14:59:00 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0xffffffff, 0x1000000, 0x0, 0x0, 0x0, "5a755b33bfb6ab3f147250aac5d3be0ac397df"}) 14:59:00 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x4, 0x5, {"2bee5d508229fff66bbdd9262ce5319d"}, 0xfffffffffffffffa, 0x9243, 0x800000000000029d}}}, 0xa0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x3, 0x7f, 0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x4, 0x5, {"2bee5d508229fff66bbdd9262ce5319d"}, 0xfffffffffffffffa, 0x9243, 0x800000000000029d}}}, 0xa0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x3, 0x7f, 0x1}) (async) 14:59:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) (async) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x70) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x7fff, 0x0, 0x9, 0x1b, "7e16f7fc67007086"}) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "b681940000bd7683d55115d197df00001b00"}) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x70) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x7fff, 0x0, 0x9, 0x1b, "7e16f7fc67007086"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x70) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x7fff, 0x0, 0x9, 0x1b, "7e16f7fc67007086"}) (async) 14:59:00 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:00 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) 14:59:00 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x4, 0x5, {"2bee5d508229fff66bbdd9262ce5319d"}, 0xfffffffffffffffa, 0x9243, 0x800000000000029d}}}, 0xa0) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x3, 0x7f, 0x1}) 14:59:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "b681940000bd7683d55115d197df00001b00"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "b681940000bd7683d55115d197df00001b00"}) (async) 14:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x1, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:01 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private2, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "b681940000bd7683d55115d197df00001b00"}) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x101, 0x2, 0x1, 0x4, 0x4, "7fb2d0cd45892ed1"}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/140) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 14:59:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x1, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x1, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:59:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:01 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private2, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) (async) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x210) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = inotify_init1(0x80800) inotify_rm_watch(r3, r1) 14:59:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x1, 0x1000000, 0x1, 0x0, 0x3, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x101, 0x2, 0x1, 0x4, 0x4, "7fb2d0cd45892ed1"}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/140) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) (rerun: 64) 14:59:01 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private2, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x101, 0x2, 0x1, 0x4, 0x4, "7fb2d0cd45892ed1"}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/140) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x101, 0x2, 0x1, 0x4, 0x4, "7fb2d0cd45892ed1"}) (async) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/140) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) (async) 14:59:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/4096) 14:59:01 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x210) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r2, 0x5607) (async, rerun: 32) r3 = inotify_init1(0x80800) (rerun: 32) inotify_rm_watch(r3, r1) 14:59:01 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) 14:59:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xb, '\x00', [@generic={0x6, 0x3b, "81c4a7d533ac4ed93b1bb9e6b300d114562ee9c7f1722fdd4d4396b843f37f431591de57774a072f2c23c0c1e9c815bbba4a7026c301812e577dc5"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim, @pad1]}, 0x60) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x26, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) 14:59:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {&(0x7f0000001140), 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:01 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x26, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) 14:59:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xb, '\x00', [@generic={0x6, 0x3b, "81c4a7d533ac4ed93b1bb9e6b300d114562ee9c7f1722fdd4d4396b843f37f431591de57774a072f2c23c0c1e9c815bbba4a7026c301812e577dc5"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim, @pad1]}, 0x60) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xb, '\x00', [@generic={0x6, 0x3b, "81c4a7d533ac4ed93b1bb9e6b300d114562ee9c7f1722fdd4d4396b843f37f431591de57774a072f2c23c0c1e9c815bbba4a7026c301812e577dc5"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim, @pad1]}, 0x60) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:59:01 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x40000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) (async) 14:59:01 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x210) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r2, 0x5607) (async) ioctl$VT_WAITACTIVE(r2, 0x5607) r3 = inotify_init1(0x80800) inotify_rm_watch(r3, r1) 14:59:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xb, '\x00', [@generic={0x6, 0x3b, "81c4a7d533ac4ed93b1bb9e6b300d114562ee9c7f1722fdd4d4396b843f37f431591de57774a072f2c23c0c1e9c815bbba4a7026c301812e577dc5"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @enc_lim, @pad1]}, 0x60) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x26, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x26, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) (async) 14:59:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x9, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 2: accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x2, 0x0, 0x2, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) 14:59:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "c66741aaa1a11f6f", "c8501dfc61ac669e8689c1de599d0e69", "6abc9225", "b71881a78c14fc41"}, 0x28) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) 14:59:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x9, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "c66741aaa1a11f6f", "c8501dfc61ac669e8689c1de599d0e69", "6abc9225", "b71881a78c14fc41"}, 0x28) 14:59:01 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) 14:59:01 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="90", 0x1, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x200, 0x1000000, 0x586, 0x4, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x3, 0x9, 0x20, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) [ 3346.065318][T17919] ================================================================== [ 3346.073426][T17919] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch [ 3346.082385][T17919] [ 3346.084713][T17919] read-write to 0xffff888100130b50 of 8 bytes by task 17928 on cpu 0: [ 3346.092884][T17919] percpu_counter_add_batch+0xc9/0x140 [ 3346.098368][T17919] shmem_get_folio_gfp+0x759/0x1200 [ 3346.103585][T17919] shmem_write_begin+0xa6/0x1d0 [ 3346.108443][T17919] generic_perform_write+0x1cf/0x410 [ 3346.113835][T17919] __generic_file_write_iter+0xa1/0x120 [ 3346.119409][T17919] generic_file_write_iter+0x7d/0x1c0 [ 3346.124800][T17919] vfs_write+0x4ab/0x7d0 [ 3346.129081][T17919] ksys_write+0xeb/0x1a0 [ 3346.133429][T17919] __x64_sys_write+0x42/0x50 [ 3346.138013][T17919] do_syscall_64+0x41/0xc0 [ 3346.142417][T17919] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.148306][T17919] [ 3346.150628][T17919] read to 0xffff888100130b50 of 8 bytes by task 17919 on cpu 1: [ 3346.158252][T17919] __percpu_counter_compare+0x2b/0x1d0 [ 3346.163722][T17919] shmem_get_folio_gfp+0x722/0x1200 [ 3346.168911][T17919] shmem_write_begin+0xa6/0x1d0 [ 3346.173836][T17919] generic_perform_write+0x1cf/0x410 [ 3346.179124][T17919] __generic_file_write_iter+0xa1/0x120 [ 3346.184659][T17919] generic_file_write_iter+0x7d/0x1c0 [ 3346.190099][T17919] vfs_write+0x4ab/0x7d0 [ 3346.194354][T17919] ksys_write+0xeb/0x1a0 [ 3346.198590][T17919] __x64_sys_write+0x42/0x50 [ 3346.203188][T17919] do_syscall_64+0x41/0xc0 [ 3346.207610][T17919] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.213514][T17919] [ 3346.215821][T17919] value changed: 0x00000000000018e0 -> 0x0000000000001900 [ 3346.222907][T17919] [ 3346.225215][T17919] Reported by Kernel Concurrency Sanitizer on: [ 3346.231343][T17919] CPU: 1 PID: 17919 Comm: syz-executor.0 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 3346.241739][T17919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3346.251779][T17919] ================================================================== 14:59:01 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:01 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="90", 0x1, 0xfffffffffffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x200, 0x1000000, 0x586, 0x4, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "c66741aaa1a11f6f", "c8501dfc61ac669e8689c1de599d0e69", "6abc9225", "b71881a78c14fc41"}, 0x28) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r2}, @free_buffer, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/250, 0xfa, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/146, 0x92, 0x1, 0x14}, @fda={0x66646185, 0x1, 0x1, 0x6}}, &(0x7f0000000880)={0x0, 0x28, 0x50}}}], 0xac, 0x0, &(0x7f0000000240)="09ef31744b6f6c8a28f10029065d1a31ff837408bcdba877ae7366752d604d1d14c6e309a0baac30d10c46ff693c2d2ecbe773c57335b783b3358ed5aa7b82bf40c19cdd31d4ef7b227f31bc9c948f06674951f3e8e6ca93ab07586a6bce767b8e458452eda85ba4917daa93250138d848e2707c4fe8fda9f17cf91a18ca5e77f85c79fd51ecd5c434c2b912185969a379f11b19fec17933b164007728da9a8a70eac3d049706428541ed345"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="066304400000000003630840", @ANYRES64=r4, @ANYBLOB="0900000000000000000000000963104000"/32], 0xf7, 0x0, &(0x7f0000000440)="8abe5eccbf9b2c1e8cbad3c2792dea096f63891852d70de543595b41c97ca0adcb383bcda83e667d060271e0eb24df3903811d87240345a5adbf88545cd3b0359dbae8dab9a0de07007f4cc68b43c968082cbe65ef0e670765703cc4350865deb943bacb87505e5d37ee93c099c2991ad252ce80a9f55f8fca78bd55ee5513b55a215adbf86eae1d1d70967e07d5449093f302b5263a8cca3c354d6406b8a81450f7b889c39681c6a7974e965177600f8ad1988511dae7917b51bef2bc94088d9cad06439389e7e09754eba8a7a600383e22c3a329381f21219d899b594dff001bce4e7dab2ba8f75ba1506254f24705a841808635c8af"}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000005c0)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x9, 0x4, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r8, &(0x7f0000000140)="9504e4a24b397535a5d5e4cbf662c6ab2124f18a1ea3423dca94a8d62cdfccf4800f26eb", &(0x7f0000000180)=@udp6=r3, 0x4}, 0x20) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_pts(r0, 0x101401) syz_open_pts(r1, 0x0) 14:59:01 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 14:59:01 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="90", 0x1, 0xfffffffffffffffe) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x200, 0x1000000, 0x586, 0x4, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (rerun: 64) 14:59:01 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_pts(r0, 0x101401) syz_open_pts(r1, 0x0) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async, rerun: 64) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000002) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r2}, @free_buffer, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/250, 0xfa, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/146, 0x92, 0x1, 0x14}, @fda={0x66646185, 0x1, 0x1, 0x6}}, &(0x7f0000000880)={0x0, 0x28, 0x50}}}], 0xac, 0x0, &(0x7f0000000240)="09ef31744b6f6c8a28f10029065d1a31ff837408bcdba877ae7366752d604d1d14c6e309a0baac30d10c46ff693c2d2ecbe773c57335b783b3358ed5aa7b82bf40c19cdd31d4ef7b227f31bc9c948f06674951f3e8e6ca93ab07586a6bce767b8e458452eda85ba4917daa93250138d848e2707c4fe8fda9f17cf91a18ca5e77f85c79fd51ecd5c434c2b912185969a379f11b19fec17933b164007728da9a8a70eac3d049706428541ed345"}) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (rerun: 32) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="066304400000000003630840", @ANYRES64=r4, @ANYBLOB="0900000000000000000000000963104000"/32], 0xf7, 0x0, &(0x7f0000000440)="8abe5eccbf9b2c1e8cbad3c2792dea096f63891852d70de543595b41c97ca0adcb383bcda83e667d060271e0eb24df3903811d87240345a5adbf88545cd3b0359dbae8dab9a0de07007f4cc68b43c968082cbe65ef0e670765703cc4350865deb943bacb87505e5d37ee93c099c2991ad252ce80a9f55f8fca78bd55ee5513b55a215adbf86eae1d1d70967e07d5449093f302b5263a8cca3c354d6406b8a81450f7b889c39681c6a7974e965177600f8ad1988511dae7917b51bef2bc94088d9cad06439389e7e09754eba8a7a600383e22c3a329381f21219d899b594dff001bce4e7dab2ba8f75ba1506254f24705a841808635c8af"}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000005c0)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x9, 0x4, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r8, &(0x7f0000000140)="9504e4a24b397535a5d5e4cbf662c6ab2124f18a1ea3423dca94a8d62cdfccf4800f26eb", &(0x7f0000000180)=@udp6=r3, 0x4}, 0x20) 14:59:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_pts(r0, 0x40000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x6, 0x7f, 0x1, 0x81, "92a4a97b2d990152bb80ab8f9613f44fa7bd05", 0x2, 0x7}) 14:59:01 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r2}, @free_buffer, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/250, 0xfa, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/146, 0x92, 0x1, 0x14}, @fda={0x66646185, 0x1, 0x1, 0x6}}, &(0x7f0000000880)={0x0, 0x28, 0x50}}}], 0xac, 0x0, &(0x7f0000000240)="09ef31744b6f6c8a28f10029065d1a31ff837408bcdba877ae7366752d604d1d14c6e309a0baac30d10c46ff693c2d2ecbe773c57335b783b3358ed5aa7b82bf40c19cdd31d4ef7b227f31bc9c948f06674951f3e8e6ca93ab07586a6bce767b8e458452eda85ba4917daa93250138d848e2707c4fe8fda9f17cf91a18ca5e77f85c79fd51ecd5c434c2b912185969a379f11b19fec17933b164007728da9a8a70eac3d049706428541ed345"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="066304400000000003630840", @ANYRES64=r4, @ANYBLOB="0900000000000000000000000963104000"/32], 0xf7, 0x0, &(0x7f0000000440)="8abe5eccbf9b2c1e8cbad3c2792dea096f63891852d70de543595b41c97ca0adcb383bcda83e667d060271e0eb24df3903811d87240345a5adbf88545cd3b0359dbae8dab9a0de07007f4cc68b43c968082cbe65ef0e670765703cc4350865deb943bacb87505e5d37ee93c099c2991ad252ce80a9f55f8fca78bd55ee5513b55a215adbf86eae1d1d70967e07d5449093f302b5263a8cca3c354d6406b8a81450f7b889c39681c6a7974e965177600f8ad1988511dae7917b51bef2bc94088d9cad06439389e7e09754eba8a7a600383e22c3a329381f21219d899b594dff001bce4e7dab2ba8f75ba1506254f24705a841808635c8af"}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000005c0)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x9, 0x4, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r8, &(0x7f0000000140)="9504e4a24b397535a5d5e4cbf662c6ab2124f18a1ea3423dca94a8d62cdfccf4800f26eb", &(0x7f0000000180)=@udp6=r3, 0x4}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000002) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x70, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r2}, @free_buffer, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/250, 0xfa, 0x2, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/146, 0x92, 0x1, 0x14}, @fda={0x66646185, 0x1, 0x1, 0x6}}, &(0x7f0000000880)={0x0, 0x28, 0x50}}}], 0xac, 0x0, &(0x7f0000000240)="09ef31744b6f6c8a28f10029065d1a31ff837408bcdba877ae7366752d604d1d14c6e309a0baac30d10c46ff693c2d2ecbe773c57335b783b3358ed5aa7b82bf40c19cdd31d4ef7b227f31bc9c948f06674951f3e8e6ca93ab07586a6bce767b8e458452eda85ba4917daa93250138d848e2707c4fe8fda9f17cf91a18ca5e77f85c79fd51ecd5c434c2b912185969a379f11b19fec17933b164007728da9a8a70eac3d049706428541ed345"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="066304400000000003630840", @ANYRES64=r4, @ANYBLOB="0900000000000000000000000963104000"/32], 0xf7, 0x0, &(0x7f0000000440)="8abe5eccbf9b2c1e8cbad3c2792dea096f63891852d70de543595b41c97ca0adcb383bcda83e667d060271e0eb24df3903811d87240345a5adbf88545cd3b0359dbae8dab9a0de07007f4cc68b43c968082cbe65ef0e670765703cc4350865deb943bacb87505e5d37ee93c099c2991ad252ce80a9f55f8fca78bd55ee5513b55a215adbf86eae1d1d70967e07d5449093f302b5263a8cca3c354d6406b8a81450f7b889c39681c6a7974e965177600f8ad1988511dae7917b51bef2bc94088d9cad06439389e7e09754eba8a7a600383e22c3a329381f21219d899b594dff001bce4e7dab2ba8f75ba1506254f24705a841808635c8af"}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r6, 0x4b45, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000005c0)={0x1}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x9}}, 0x20) (async) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x9, 0x4, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x4}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r8, &(0x7f0000000140)="9504e4a24b397535a5d5e4cbf662c6ab2124f18a1ea3423dca94a8d62cdfccf4800f26eb", &(0x7f0000000180)=@udp6=r3, 0x4}, 0x20) (async) 14:59:02 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_pts(r0, 0x101401) syz_open_pts(r1, 0x0) 14:59:02 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) (async) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_pts(r0, 0x40000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x6, 0x7f, 0x1, 0x81, "92a4a97b2d990152bb80ab8f9613f44fa7bd05", 0x2, 0x7}) 14:59:02 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 14:59:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_pts(r0, 0x40000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x6, 0x7f, 0x1, 0x81, "92a4a97b2d990152bb80ab8f9613f44fa7bd05", 0x2, 0x7}) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x8}}, 0x20) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0xcd, 0x400}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="07f50000000000000a004e247ffffffffc010000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2100000000ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000003fc02000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000012800000000000000000000ffff7f00000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000100010000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000b600000000000000000000ffffffffffff00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000005fc00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000042001000000000000000000000000000200080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff020000000000000000000000000001aa0c00"/1168], 0x490) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x2) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff) 14:59:02 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\\'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) 14:59:02 executing program 2: exit(0xfffffffffffeffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcf9}, 0x4008056) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x8}}, 0x20) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0xcd, 0x400}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="07f50000000000000a004e247ffffffffc010000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2100000000ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000003fc02000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000012800000000000000000000ffff7f00000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000100010000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000b600000000000000000000ffffffffffff00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000005fc00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000042001000000000000000000000000000200080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff020000000000000000000000000001aa0c00"/1168], 0x490) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x2) (async) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) (async) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff) 14:59:02 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcf9}, 0x4008056) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcf9}, 0x4008056) (async) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x8}}, 0x20) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0xcd, 0x400}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="07f50000000000000a004e247ffffffffc010000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2100000000ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000003fc02000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000012800000000000000000000ffff7f00000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000100010000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000b600000000000000000000ffffffffffff00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000005fc00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000042001000000000000000000000000000200080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff020000000000000000000000000001aa0c00"/1168], 0x490) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x2) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x13f, 0x8}}, 0x20) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0xcd, 0x400}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="07f50000000000000a004e247ffffffffc010000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000a004e2100000000ff02000000000000000000000000000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000003fc02000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e200000012800000000000000000000ffff7f00000108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000100010000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000b600000000000000000000ffffffffffff00040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000005fc00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000000042001000000000000000000000000000200080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000007ff020000000000000000000000000001aa0c00"/1168], 0x490) (async) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x2) (async) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) (async) pipe(&(0x7f00000006c0)) (async) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000100)=0x7ff) (async) 14:59:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcf9}, 0x4008056) 14:59:02 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x7) 14:59:02 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:02 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:02 executing program 2: exit(0xfffffffffffeffff) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x7) (async) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x7) 14:59:02 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:02 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:02 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:02 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e23, 0x2, @private2, 0x9}}}, 0x38) 14:59:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x45, @empty}, 0x1c, 0x0}, 0x0) 14:59:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x7) 14:59:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x45, @empty}, 0x1c, 0x0}, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x45, @empty}, 0x1c, 0x0}, 0x0) 14:59:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xffffff, 0x8, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x801}) 14:59:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x45, @empty}, 0x1c, 0x0}, 0x0) 14:59:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xffffff, 0x8, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x801}) 14:59:03 executing program 2: exit(0xfffffffffffeffff) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0xffffff, 0x8, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x0, 0x801}) 14:59:03 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x8001, 0x40, 0x7e0000, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r3}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x10, 0x1, @in6={0xa, 0x4e21, 0x249, @mcast2, 0x7fff}}}, 0xa0) 14:59:03 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x17, 0x3}}, 0x20) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)=0x1) 14:59:03 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:03 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x2, @private2, 0x9}}}, 0x38) 14:59:03 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x17, 0x3}}, 0x20) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)=0x1) 14:59:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x434) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:03 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x8001, 0x40, 0x7e0000, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r3}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x10, 0x1, @in6={0xa, 0x4e21, 0x249, @mcast2, 0x7fff}}}, 0xa0) 14:59:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x434) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:03 executing program 5: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r0}}, 0x18) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x8001, 0x40, 0x7e0000, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, r3}}, 0x38) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x10, 0x1, @in6={0xa, 0x4e21, 0x249, @mcast2, 0x7fff}}}, 0xa0) 14:59:03 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x17, 0x3}}, 0x20) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)=0x1) 14:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x434) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0xfffffffffffffc44}, 0x4008051) 14:59:04 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 14:59:04 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2, 0x9}}}, 0x38) 14:59:04 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:04 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 14:59:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0xfffffffffffffc44}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0xfffffffffffffc44}, 0x4008051) 14:59:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xad9c, 0x6, 0x9, 0x3, 0x2, "3d1479879fe4899ae81e05dd8a4342f22cd4dc", 0x798, 0xfb68}) 14:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:59:04 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 14:59:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0xfffffffffffffc44}, 0x4008051) 14:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xad9c, 0x6, 0x9, 0x3, 0x2, "3d1479879fe4899ae81e05dd8a4342f22cd4dc", 0x798, 0xfb68}) 14:59:04 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:04 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0xc0080c1) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x3e, @mcast1, 0x401}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="fe1fa2010998671315715cff5b55e12d18d2ba12c7c74697207590d3dee202855dfc1c5a7ee03d9045b6da8f9c7349b664a56dcd59307ce7a76e6b3373061b7dd72733bcacaca7ba3bc986b81f1f2f18746f537d82b1fa0f920fb5e549ae3bef903b76e083cd7ad0518261", 0x6b}, {&(0x7f0000000380)="523119a1ce10a065556b35ca1c3a73fd9f6bf4309decfb40965accdefa3b7ed9d10eb1fc16000a9b9312a9080d2c0aa23546a5486cface36bbe99fe99bbc32dc9af392722f808c22f1560055231b74b0b49a06907a9d06c3f715f9ffbd0bad07d95d3c9d5337933bfd32e56aa3d1e34435cacdf1e957ea065f0dd9b05d1070c5faf4ab64fa31a3708c08c5abd9749e2fe4bae6e97057711cc85c62f43313d696bcbc3b44d85ae80de5132b4ce93ea3b2bff38cf9908901bb0f9b494d7b9af4480000006045ac3c2e7a32ce251f59423b0d51df48bf25d930ac", 0xd9}, {&(0x7f0000000240)="aa9dc594b57b29be3c5112568237229f80e60e1dbf70c66574e89de73d12fe2ea3fd9610f15b2db61dbbe6ab9169b2000000000000000000", 0x38}], 0x3}, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000480)=""/238, 0xee, 0x3000, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @private1, 0xadea}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000100)=0x14) 14:59:04 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x38) 14:59:04 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:04 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = syz_open_pts(r0, 0x70fb43) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xad9c, 0x6, 0x9, 0x3, 0x2, "3d1479879fe4899ae81e05dd8a4342f22cd4dc", 0x798, 0xfb68}) 14:59:05 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0xc0080c1) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x3e, @mcast1, 0x401}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="fe1fa2010998671315715cff5b55e12d18d2ba12c7c74697207590d3dee202855dfc1c5a7ee03d9045b6da8f9c7349b664a56dcd59307ce7a76e6b3373061b7dd72733bcacaca7ba3bc986b81f1f2f18746f537d82b1fa0f920fb5e549ae3bef903b76e083cd7ad0518261", 0x6b}, {&(0x7f0000000380)="523119a1ce10a065556b35ca1c3a73fd9f6bf4309decfb40965accdefa3b7ed9d10eb1fc16000a9b9312a9080d2c0aa23546a5486cface36bbe99fe99bbc32dc9af392722f808c22f1560055231b74b0b49a06907a9d06c3f715f9ffbd0bad07d95d3c9d5337933bfd32e56aa3d1e34435cacdf1e957ea065f0dd9b05d1070c5faf4ab64fa31a3708c08c5abd9749e2fe4bae6e97057711cc85c62f43313d696bcbc3b44d85ae80de5132b4ce93ea3b2bff38cf9908901bb0f9b494d7b9af4480000006045ac3c2e7a32ce251f59423b0d51df48bf25d930ac", 0xd9}, {&(0x7f0000000240)="aa9dc594b57b29be3c5112568237229f80e60e1dbf70c66574e89de73d12fe2ea3fd9610f15b2db61dbbe6ab9169b2000000000000000000", 0x38}], 0x3}, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000480)=""/238, 0xee, 0x3000, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @private1, 0xadea}, 0x1c) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000100)=0x14) 14:59:05 executing program 5: sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0xc0080c1) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0xc0080c1) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x3e, @mcast1, 0x401}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="fe1fa2010998671315715cff5b55e12d18d2ba12c7c74697207590d3dee202855dfc1c5a7ee03d9045b6da8f9c7349b664a56dcd59307ce7a76e6b3373061b7dd72733bcacaca7ba3bc986b81f1f2f18746f537d82b1fa0f920fb5e549ae3bef903b76e083cd7ad0518261", 0x6b}, {&(0x7f0000000380)="523119a1ce10a065556b35ca1c3a73fd9f6bf4309decfb40965accdefa3b7ed9d10eb1fc16000a9b9312a9080d2c0aa23546a5486cface36bbe99fe99bbc32dc9af392722f808c22f1560055231b74b0b49a06907a9d06c3f715f9ffbd0bad07d95d3c9d5337933bfd32e56aa3d1e34435cacdf1e957ea065f0dd9b05d1070c5faf4ab64fa31a3708c08c5abd9749e2fe4bae6e97057711cc85c62f43313d696bcbc3b44d85ae80de5132b4ce93ea3b2bff38cf9908901bb0f9b494d7b9af4480000006045ac3c2e7a32ce251f59423b0d51df48bf25d930ac", 0xd9}, {&(0x7f0000000240)="aa9dc594b57b29be3c5112568237229f80e60e1dbf70c66574e89de73d12fe2ea3fd9610f15b2db61dbbe6ab9169b2000000000000000000", 0x38}], 0x3}, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000000480)=""/238, 0xee, 0x3000, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @private1, 0xadea}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000100)=0x14) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e22, 0x8, @loopback, 0x1}}}, 0x38) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) r1 = syz_open_pts(r0, 0x70fb43) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x12}]}, 0x48}, 0x1, 0x0, 0x0, 0x10001}, 0x4000080) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:05 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e22, 0x8, @loopback, 0x1}}}, 0x38) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:05 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x12}]}, 0x48}, 0x1, 0x0, 0x0, 0x10001}, 0x4000080) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x12}]}, 0x48}, 0x1, 0x0, 0x0, 0x10001}, 0x4000080) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e22, 0x8, @loopback, 0x1}}}, 0x38) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) r1 = syz_open_pts(r0, 0x70fb43) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) syz_open_pts(r0, 0x70fb43) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:59:05 executing program 5: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x12}]}, 0x48}, 0x1, 0x0, 0x0, 0x10001}, 0x4000080) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) 14:59:05 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x100, 0x8) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5418, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_open_pts(r3, 0x418042) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e01, 0xc172, @private2, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x34}, 0x4008051) 14:59:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x100, 0x8) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5418, 0x0) (async) ioctl$TCSETSW2(r1, 0x5418, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) syz_open_pts(r3, 0x418042) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e01, 0xc172, @private2, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x34}, 0x4008051) 14:59:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x100, 0x8) (rerun: 64) 14:59:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) (async) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5418, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, 0x0) (async) syz_open_pts(r3, 0x418042) (async) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000640)={0xa, 0x4e01, 0xc172, @private2, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x34}, 0x4008051) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x26}, 0x4008051) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x101400) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @window={0x3, 0x1, 0x3f}, @window={0x3, 0x2, 0xb200}], 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/34, 0x22, 0x1, &(0x7f0000000380)=""/111, 0x6f}, &(0x7f0000000440)=0x40) 14:59:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:05 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:59:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x7, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df", 0x4}) (async) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x26}, 0x4008051) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x101400) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) (async) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async, rerun: 64) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @window={0x3, 0x1, 0x3f}, @window={0x3, 0x2, 0xb200}], 0x3) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/34, 0x22, 0x1, &(0x7f0000000380)=""/111, 0x6f}, &(0x7f0000000440)=0x40) 14:59:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3701, 0x408) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xfff, 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x58, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x26}, 0x4008051) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x101400) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r4, 0x4b45, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffa}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @window={0x3, 0x1, 0x3f}, @window={0x3, 0x2, 0xb200}], 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/34, 0x22, 0x1, &(0x7f0000000380)=""/111, 0x6f}, &(0x7f0000000440)=0x40) 14:59:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20a600, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 14:59:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20a600, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet(0x2, 0x4, 0x9) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 14:59:05 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x1, {0xa, 0x4e23, 0x6, @remote, 0x3}}}, 0x38) 14:59:05 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20a600, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet(0x2, 0x4, 0x9) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) (async) socket$inet(0x2, 0x4, 0x9) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) 14:59:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3701, 0x408) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) (async) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xfff, 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x58, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x58, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) 14:59:05 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x3, 0x401}) 14:59:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}, 0x4008051) r1 = socket$inet(0x2, 0x4, 0x9) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 14:59:05 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) 14:59:06 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:06 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:06 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x3, 0x401}) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x3, 0x401}) 14:59:06 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}, 0x4008051) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000000)="35a4252f6c61d7936fe4ff101cab4fd1ceb4edb91f6d7bc881f91b72dcedd2839a08a6b6dc5e897f7ddce5f653856c24395bd426b62683c40d810bfbea1ff8b210fd4d51b309bd7b661112db84b98e19a7983ad9452736a66c7a1a4d8ee49de4929e5bebfc112d523292613c0ca246e0032beec0375d78a5ea1983c1b619e16b81e765742c000e58672f204830c415eb6a6ee15703564240905394b49b838076ed6e5c6904440439c58bdb8191230671ba8e", 0xb2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18) 14:59:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:06 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3701, 0x408) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xfff, 0x5}) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xfff, 0x5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x58, 0xfa00, {0x0, 0x0}}, 0xfffffdef) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x58, 0xfa00, {0x0, 0x0}}, 0xfffffdef) 14:59:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x12, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x3, 0x401}) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) (async) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}, 0x4008051) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000000)="35a4252f6c61d7936fe4ff101cab4fd1ceb4edb91f6d7bc881f91b72dcedd2839a08a6b6dc5e897f7ddce5f653856c24395bd426b62683c40d810bfbea1ff8b210fd4d51b309bd7b661112db84b98e19a7983ad9452736a66c7a1a4d8ee49de4929e5bebfc112d523292613c0ca246e0032beec0375d78a5ea1983c1b619e16b81e765742c000e58672f204830c415eb6a6ee15703564240905394b49b838076ed6e5c6904440439c58bdb8191230671ba8e", 0xb2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18) 14:59:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x12, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x2000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}, 0x4008051) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000000)="35a4252f6c61d7936fe4ff101cab4fd1ceb4edb91f6d7bc881f91b72dcedd2839a08a6b6dc5e897f7ddce5f653856c24395bd426b62683c40d810bfbea1ff8b210fd4d51b309bd7b661112db84b98e19a7983ad9452736a66c7a1a4d8ee49de4929e5bebfc112d523292613c0ca246e0032beec0375d78a5ea1983c1b619e16b81e765742c000e58672f204830c415eb6a6ee15703564240905394b49b838076ed6e5c6904440439c58bdb8191230671ba8e", 0xb2) (rerun: 64) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x18) 14:59:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:06 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x12, 0x1000000, 0x0, 0x0, 0x0, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x200000, @remote, 0xfffffc}, 0x1c, 0x0}, 0x4008051) 14:59:06 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x200000, @remote, 0xfffffc}, 0x1c, 0x0}, 0x4008051) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x200000, @remote, 0xfffffc}, 0x1c, 0x0}, 0x4008051) 14:59:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) (async) 14:59:06 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4c0240) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/122) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/3) 14:59:06 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5d3301, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) 14:59:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x200000, @remote, 0xfffffc}, 0x1c, 0x0}, 0x4008051) 14:59:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0) 14:59:06 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000000, 0x0, 0x0, 0xfc, "5a755b38bfb6ab3f147250aac5d3be15d197df"}) 14:59:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x8000, @remote}, 0x1c, 0x0}, 0x4008051) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xd1, 0x1}, 0x10) 14:59:06 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000640)={0xa, 0x4e21, 0x8000, @remote}, 0x1c, 0x0}, 0x4008051) (async, rerun: 32) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xd1, 0x1}, 0x10) (rerun: 32) 14:59:06 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x408) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/mdstat\x00', 0x0, 0x0)