rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="060000001400030400000000000000000a000000", @ANYRES32=r5, @ANYRESOCT=r5], 0x48}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (rerun: 32) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async, rerun: 64) read$eventfd(r10, &(0x7f0000000140), 0x8) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) (async) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) 15:03:31 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x0, 0x23, &(0x7f0000000040)=""/35}, {0xf000, 0xec, &(0x7f0000000080)=""/236}, {0xf000, 0xf, &(0x7f0000000180)=""/15}, {0x1, 0x0, &(0x7f0000000340)}]}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="01f153a201000000"]) 15:03:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:31 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x10, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x10, r8, 0x0) splice(r5, 0x0, r6, 0x0, 0x7fffffff, 0xa00b000000000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000000974848bd8063ba8d49f2676bcbd6312dbe4a23c3dc6dafe99249d9f3483982e1563699b4b8b4f2df88f92e559ae63b512e61"]) 15:03:31 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:03:31 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async, rerun: 64) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:03:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:31 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x0, 0x23, &(0x7f0000000040)=""/35}, {0xf000, 0xec, &(0x7f0000000080)=""/236}, {0xf000, 0xf, &(0x7f0000000180)=""/15}, {0x1, 0x0, &(0x7f0000000340)}]}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="01f153a201000000"]) 15:03:31 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:31 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x10, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x10, r8, 0x0) splice(r5, 0x0, r6, 0x0, 0x7fffffff, 0xa00b000000000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000000974848bd8063ba8d49f2676bcbd6312dbe4a23c3dc6dafe99249d9f3483982e1563699b4b8b4f2df88f92e559ae63b512e61"]) 15:03:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="04", 0x1, 0x20008844, &(0x7f00000000c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r4, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000300)=ANY=[@ANYBLOB="bba6ad764a4a3ca4b49d1b6714922302f9f7ffffff879304365ac7a0908c59d47b2164fc75f6510cd9e598f920"]) 15:03:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x0, 0x23, &(0x7f0000000040)=""/35}, {0xf000, 0xec, &(0x7f0000000080)=""/236}, {0xf000, 0xf, &(0x7f0000000180)=""/15}, {0x1, 0x0, &(0x7f0000000340)}]}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="01f153a201000000"]) 15:03:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:03:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host}) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) (async) close(r6) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x10, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x10, r8, 0x0) splice(r5, 0x0, r6, 0x0, 0x7fffffff, 0xa00b000000000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000000974848bd8063ba8d49f2676bcbd6312dbe4a23c3dc6dafe99249d9f3483982e1563699b4b8b4f2df88f92e559ae63b512e61"]) 15:03:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x22}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20042800}, 0x20004080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:32 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000001540)=""/52, 0x34}, {&(0x7f00000016c0)=""/207, 0xcf}], 0x2, 0x0, 0x825) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001600)={0x5, 0x0, [{0x3000, 0xc1, &(0x7f0000000040)=""/193}, {0x2000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0x3e, &(0x7f0000000140)=""/62}, {0x10000, 0xa4, &(0x7f0000000340)=""/164}, {0x1, 0x50, &(0x7f00000014c0)=""/80}]}) 15:03:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="04", 0x1, 0x20008844, &(0x7f00000000c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r4, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000300)=ANY=[@ANYBLOB="bba6ad764a4a3ca4b49d1b6714922302f9f7ffffff879304365ac7a0908c59d47b2164fc75f6510cd9e598f920"]) 15:03:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host}) 15:03:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x22}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20042800}, 0x20004080) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000001540)=""/52, 0x34}, {&(0x7f00000016c0)=""/207, 0xcf}], 0x2, 0x0, 0x825) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001600)={0x5, 0x0, [{0x3000, 0xc1, &(0x7f0000000040)=""/193}, {0x2000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0x3e, &(0x7f0000000140)=""/62}, {0x10000, 0xa4, &(0x7f0000000340)=""/164}, {0x1, 0x50, &(0x7f00000014c0)=""/80}]}) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd2(0x5, 0x80000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r2}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:32 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="04", 0x1, 0x20008844, &(0x7f00000000c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r4, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000300)=ANY=[@ANYBLOB="bba6ad764a4a3ca4b49d1b6714922302f9f7ffffff879304365ac7a0908c59d47b2164fc75f6510cd9e598f920"]) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd2(0x5, 0x80000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r2}) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x22}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20042800}, 0x20004080) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:32 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000001540)=""/52, 0x34}, {&(0x7f00000016c0)=""/207, 0xcf}], 0x2, 0x0, 0x825) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001600)={0x5, 0x0, [{0x3000, 0xc1, &(0x7f0000000040)=""/193}, {0x2000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0x3e, &(0x7f0000000140)=""/62}, {0x10000, 0xa4, &(0x7f0000000340)=""/164}, {0x1, 0x50, &(0x7f00000014c0)=""/80}]}) 15:03:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x521800) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3, 0x4}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x11) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd2(0x5, 0x80000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x0, r2}) (async, rerun: 64) r3 = dup3(r1, r0, 0x0) (rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "72c3c2a17a894c0390f837fe3bb058b5dd04ee2cbb2b8cea59adca3db43ca31ce9ff9859a71e362ee20900ab110b11f0a100", 0x1d}, 0x9b, r1) keyctl$negate(0xd, 0x0, 0x4, r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x45, &(0x7f00000001c0)=""/69}, {0x0, 0xc1, &(0x7f0000000340)=""/193}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000019c0)) 15:03:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r3}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host}) 15:03:32 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x521800) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3, 0x4}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x11) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x521800) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3, 0x4}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x11) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) (async) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x61, &(0x7f0000000040)=""/97}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0xff0, &(0x7f0000002cc0)=""/4080}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) dup(r3) 15:03:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "72c3c2a17a894c0390f837fe3bb058b5dd04ee2cbb2b8cea59adca3db43ca31ce9ff9859a71e362ee20900ab110b11f0a100", 0x1d}, 0x9b, r1) keyctl$negate(0xd, 0x0, 0x4, r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x45, &(0x7f00000001c0)=""/69}, {0x0, 0xc1, &(0x7f0000000340)=""/193}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000019c0)) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "72c3c2a17a894c0390f837fe3bb058b5dd04ee2cbb2b8cea59adca3db43ca31ce9ff9859a71e362ee20900ab110b11f0a100", 0x1d}, 0x9b, r1) (async) keyctl$negate(0xd, 0x0, 0x4, r2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x45, &(0x7f00000001c0)=""/69}, {0x0, 0xc1, &(0x7f0000000340)=""/193}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) 15:03:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x521800) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000140)={0x3, 0x4}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x11) (async) open(&(0x7f0000000180)='./file0\x00', 0x80, 0x11) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) 15:03:32 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x61, &(0x7f0000000040)=""/97}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0xff0, &(0x7f0000002cc0)=""/4080}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) dup(r3) 15:03:33 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6, 0x0, 0x7af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:33 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) (async) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "72c3c2a17a894c0390f837fe3bb058b5dd04ee2cbb2b8cea59adca3db43ca31ce9ff9859a71e362ee20900ab110b11f0a100", 0x1d}, 0x9b, r1) keyctl$negate(0xd, 0x0, 0x4, r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = dup3(r4, r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x45, &(0x7f00000001c0)=""/69}, {0x0, 0xc1, &(0x7f0000000340)=""/193}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x61, &(0x7f0000000040)=""/97}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0xff0, &(0x7f0000002cc0)=""/4080}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) dup(r3) 15:03:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xffffffffffffffff, 0x504, 0x2, 0x0, 0x8, [{0x3f, 0x8, 0x7fff, '\x00', 0x1408}, {0x6, 0x5, 0x800, '\x00', 0x100}, {0x0, 0x7de, 0x4}, {0x7, 0x9, 0x7c, '\x00', 0x200}, {0x8, 0x5, 0x8000, '\x00', 0x6}, {0x1, 0xffff, 0x4}, {0x3, 0x401, 0x81, '\x00', 0x1000}, {0xffffffffffffffba, 0x2, 0x279, '\x00', 0x502}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:33 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6, 0x0, 0x7af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=""/29, &(0x7f0000000080)=""/199, &(0x7f0000000340)=""/103, 0x3000}) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x4000, 0x32, &(0x7f00000000c0)=""/50}, {0x4000, 0x77, &(0x7f0000000500)=""/119}, {0x4000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0x30, &(0x7f00000004c0)=""/48}]}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xffffffffffffffff, 0x504, 0x2, 0x0, 0x8, [{0x3f, 0x8, 0x7fff, '\x00', 0x1408}, {0x6, 0x5, 0x800, '\x00', 0x100}, {0x0, 0x7de, 0x4}, {0x7, 0x9, 0x7c, '\x00', 0x200}, {0x8, 0x5, 0x8000, '\x00', 0x6}, {0x1, 0xffff, 0x4}, {0x3, 0x401, 0x81, '\x00', 0x1000}, {0xffffffffffffffba, 0x2, 0x279, '\x00', 0x502}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:33 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6, 0x0, 0x7af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 64) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x100, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) 15:03:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=""/29, &(0x7f0000000080)=""/199, &(0x7f0000000340)=""/103, 0x3000}) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=""/29, &(0x7f0000000080)=""/199, &(0x7f0000000340)=""/103, 0x3000}) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:33 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x4000, 0x32, &(0x7f00000000c0)=""/50}, {0x4000, 0x77, &(0x7f0000000500)=""/119}, {0x4000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0x30, &(0x7f00000004c0)=""/48}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x4000, 0x32, &(0x7f00000000c0)=""/50}, {0x4000, 0x77, &(0x7f0000000500)=""/119}, {0x4000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0x30, &(0x7f00000004c0)=""/48}]}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0xffffffffffffffff, 0x504, 0x2, 0x0, 0x8, [{0x3f, 0x8, 0x7fff, '\x00', 0x1408}, {0x6, 0x5, 0x800, '\x00', 0x100}, {0x0, 0x7de, 0x4}, {0x7, 0x9, 0x7c, '\x00', 0x200}, {0x8, 0x5, 0x8000, '\x00', 0x6}, {0x1, 0xffff, 0x4}, {0x3, 0x401, 0x81, '\x00', 0x1000}, {0xffffffffffffffba, 0x2, 0x279, '\x00', 0x502}]}) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x4000, 0x32, &(0x7f00000000c0)=""/50}, {0x4000, 0x77, &(0x7f0000000500)=""/119}, {0x4000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0x30, &(0x7f00000004c0)=""/48}]}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)={0x4, 0x0, [{0x4000, 0x32, &(0x7f00000000c0)=""/50}, {0x4000, 0x77, &(0x7f0000000500)=""/119}, {0x4000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0x30, &(0x7f00000004c0)=""/48}]}) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x100, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) 15:03:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=""/29, &(0x7f0000000080)=""/199, &(0x7f0000000340)=""/103, 0x3000}) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 0: r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000040)={0x3d, 0xdf61, 0x1000}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x100, 0x70bd2d, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}}, 0x0) 15:03:33 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x52, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffff, @mcast1, 0x80}, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1a27, 0x0, 0x0, {0xa, 0x0, 0x11, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x3, r10}) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) r13 = dup3(r12, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000f9e8cefe3239e8ea4978387d6d67939000f52e05d754bc20e9b353257520b490b2c8cf798793c60e3bc59e7cb5ec93e24beef7eb25"]) 15:03:33 executing program 0: r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3}) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000040)={0x3d, 0xdf61, 0x1000}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) gettid() (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) epoll_create1(0x0) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3}) (async) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000040)={0x3d, 0xdf61, 0x1000}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) (async) 15:03:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x100}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7007fb000bd7ab774d0081dcee7d00eceb52f146211b64d0dcb122a5d35d895079e72819470c785c59d21ed2ff58077839dd86765965637236df5797920b80f5bb8d13db485293fbbef52de5829863a4f835e20f7b1355beddc70000000080010000e5b275e3eea45b45e9e668651bb62022620bc0ed8b6097ffd9dc9ad86477d6f2928e000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x38}}, 0xc000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000073000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:33 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x52, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffff, @mcast1, 0x80}, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:33 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x100}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7007fb000bd7ab774d0081dcee7d00eceb52f146211b64d0dcb122a5d35d895079e72819470c785c59d21ed2ff58077839dd86765965637236df5797920b80f5bb8d13db485293fbbef52de5829863a4f835e20f7b1355beddc70000000080010000e5b275e3eea45b45e9e668651bb62022620bc0ed8b6097ffd9dc9ad86477d6f2928e000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x38}}, 0xc000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000073000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:33 executing program 0: r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3}) (async, rerun: 64) rt_tgsigqueueinfo(r1, 0x0, 0x2d, &(0x7f0000000040)={0x3d, 0xdf61, 0x1000}) (async, rerun: 64) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) 15:03:33 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1a27, 0x0, 0x0, {0xa, 0x0, 0x11, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x5) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1a27, 0x0, 0x0, {0xa, 0x0, 0x11, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x3, r10}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x3, r10}) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) r13 = dup3(r12, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000f9e8cefe3239e8ea4978387d6d67939000f52e05d754bc20e9b353257520b490b2c8cf798793c60e3bc59e7cb5ec93e24beef7eb25"]) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000f9e8cefe3239e8ea4978387d6d67939000f52e05d754bc20e9b353257520b490b2c8cf798793c60e3bc59e7cb5ec93e24beef7eb25"]) 15:03:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (rerun: 32) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async, rerun: 64) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async, rerun: 64) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x52, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffff, @mcast1, 0x80}, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040025bd7007fb000bd7ab774d0081dcee7d00eceb52f146211b64d0dcb122a5d35d895079e72819470c785c59d21ed2ff58077839dd86765965637236df5797920b80f5bb8d13db485293fbbef52de5829863a4f835e20f7b1355beddc70000000080010000e5b275e3eea45b45e9e668651bb62022620bc0ed8b6097ffd9dc9ad86477d6f2928e000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x38}}, 0xc000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000073000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x100}) (async) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x100}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x4, @private2={0xfc, 0x2, '\x00', 0xff}}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) r6 = accept4$inet6(r4, 0x0, &(0x7f0000000e80), 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000001300)=ANY=[@ANYBLOB="10000a6751dc2fefe69d07f9b31c9e04193848695e90c99f0a5370cc3ae209ccc3aeb960000a6ae24c877bf2772e8e12b152c3e145f35befa5da1e0b4f4618faf347b549a88be9fba142e3d4b542b8af771ce2e85b5633f0709f0d905cb7af368d7ca4c5d6db870864a3634d488f900ffd35c622b3fc317c259fc887391f547ab91b1579f07f31d8b89539d8d7f4895ee762bda70b0c128c30c2a30aae169e0d", @ANYRES32, @ANYBLOB="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"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r3, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r4, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept4$inet6(r4, 0x0, &(0x7f0000000040), 0x80000) shutdown(r4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r7, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={r7, "cda165aecf66ad8af1013848e4a60fb7"}) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x4, @private2={0xfc, 0x2, '\x00', 0xff}}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x1a27, 0x0, 0x0, {0xa, 0x0, 0x11, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x5) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x3, r10}) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) (async) r13 = dup3(r12, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000f9e8cefe3239e8ea4978387d6d67939000f52e05d754bc20e9b353257520b490b2c8cf798793c60e3bc59e7cb5ec93e24beef7eb25"]) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async, rerun: 64) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) (rerun: 32) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) (async, rerun: 32) r6 = accept4$inet6(r4, 0x0, &(0x7f0000000e80), 0x800) (rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000001300)=ANY=[@ANYBLOB="10000a6751dc2fefe69d07f9b31c9e04193848695e90c99f0a5370cc3ae209ccc3aeb960000a6ae24c877bf2772e8e12b152c3e145f35befa5da1e0b4f4618faf347b549a88be9fba142e3d4b542b8af771ce2e85b5633f0709f0d905cb7af368d7ca4c5d6db870864a3634d488f900ffd35c622b3fc317c259fc887391f547ab91b1579f07f31d8b89539d8d7f4895ee762bda70b0c128c30c2a30aae169e0d", @ANYRES32, @ANYBLOB="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"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r3, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r4, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) accept4$inet6(r4, 0x0, &(0x7f0000000040), 0x80000) (async, rerun: 32) shutdown(r4, 0x1) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r7, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={r7, "cda165aecf66ad8af1013848e4a60fb7"}) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x4, @private2={0xfc, 0x2, '\x00', 0xff}}, 0x1c) (async, rerun: 32) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async, rerun: 32) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (rerun: 32) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r2) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) fcntl$notify(r2, 0x402, 0x24) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000017c0)={0x7, 0x0, [{0x5000, 0x76, &(0x7f00000000c0)=""/118}, {0xd000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x1000, 0x68, &(0x7f0000000140)=""/104}, {0x4, 0xbe, &(0x7f0000000340)=""/190}, {0xf000, 0x9f, &(0x7f00000014c0)=""/159}, {0x10000, 0xe6, &(0x7f0000001600)=""/230}, {0x4000, 0x99, &(0x7f0000001700)=""/153}]}) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e18d73dd7b0fc77953c4c3955f426b0fea000000006a000f01df0f01c2b8549d2bd70f23c00f21f83500000c000f23f80faac4e3dd6e44bc00a736f30fc773b5", 0x41}], 0x1, 0x14, &(0x7f0000000180)=[@dstype0={0x6, 0xe}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, 0x0, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x5, 0x0, [0xfffffffffffffff8, 0x101, 0xff, 0xfff, 0x1], [0x3, 0x1, 0x1, 0x3, 0x8, 0x10001, 0x7, 0x200, 0x80000000, 0xe29a, 0x3f, 0xfffffffffffffffd, 0x3, 0x400, 0x1, 0x9, 0x1, 0x4, 0x3f, 0x2, 0x5, 0x4, 0x45d4, 0x5, 0x2, 0x3, 0x4, 0x400, 0x40, 0x10000, 0x8, 0x1, 0xffffffff, 0x7fffffff, 0xc1e, 0x80000001, 0x9, 0x78, 0x4, 0x5, 0x4, 0x1, 0x6, 0x8000000000000001, 0x6edc, 0x0, 0xceef, 0x3f, 0x8, 0x3, 0x80, 0x18, 0x8, 0x4, 0xd2b, 0xfffffffffffffc00, 0x7, 0x6, 0x63a, 0x8, 0x1, 0x8, 0x8, 0x92, 0x7ff, 0x6, 0x7, 0x91, 0xb8, 0x12, 0x8, 0x2, 0x8, 0x4, 0x0, 0x2, 0x5, 0x70e, 0x10001, 0x3, 0x3, 0x0, 0x8409, 0xfffffffeffffffff, 0x7, 0x2, 0x7, 0x4, 0x3ff, 0x2f8, 0x4f7, 0x7, 0x5, 0x1, 0x4, 0x9, 0x7ff, 0x7, 0x3, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x800, 0x100000000, 0x2, 0x9, 0x7ff, 0xf0b, 0x1f, 0x7, 0xef8, 0x9, 0x0, 0x256, 0x0, 0x5, 0x5, 0x7, 0xffffffffffff7f9b, 0x3]}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) r6 = accept4$inet6(r4, 0x0, &(0x7f0000000e80), 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000001300)=ANY=[@ANYBLOB="10000a6751dc2fefe69d07f9b31c9e04193848695e90c99f0a5370cc3ae209ccc3aeb960000a6ae24c877bf2772e8e12b152c3e145f35befa5da1e0b4f4618faf347b549a88be9fba142e3d4b542b8af771ce2e85b5633f0709f0d905cb7af368d7ca4c5d6db870864a3634d488f900ffd35c622b3fc317c259fc887391f547ab91b1579f07f31d8b89539d8d7f4895ee762bda70b0c128c30c2a30aae169e0d", @ANYRES32, @ANYBLOB="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"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r3, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r4, @ANYRES32], 0x90}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000001300)=ANY=[@ANYBLOB="10000a6751dc2fefe69d07f9b31c9e04193848695e90c99f0a5370cc3ae209ccc3aeb960000a6ae24c877bf2772e8e12b152c3e145f35befa5da1e0b4f4618faf347b549a88be9fba142e3d4b542b8af771ce2e85b5633f0709f0d905cb7af368d7ca4c5d6db870864a3634d488f900ffd35c622b3fc317c259fc887391f547ab91b1579f07f31d8b89539d8d7f4895ee762bda70b0c128c30c2a30aae169e0d", @ANYRES32, @ANYBLOB="000000a2a8b9a0b639729b9aec4412797d769a34b684922e294c83ce9579a1f39149ffa03cb9888625ade27fdd826d25656e24ac7779ea6585faedfaed1d9616134eb35d8e5ee99f2532a5ec90bd1e81dc0a2adc10c9a181a9418108039f55c3d4873d4ae775be52bcb9b204d7e773f32a1c30235d7b87753693a91a5e63c7cdf2a5d2a07113e8dfc2176ad46f9899d3b3ffade15280904c8394d66192aeb9afbfb19befb11e9d45e42c5a914e6156a4ed9bb8befd0ce45a3839da44b955537768208f893ecddb9c58a66746a42b2425b109f0a316d6d0edc89879574da93fd32517f164d27e4d63d4d99f95c7529550c08719179c9152f6069d66b3dfab168ab2d7d4bc34d630623d18070f17b0898e6d1a55c80587daa8efd7ee8296082e06e62a633b81df60ca43d446e3549f3fed79f3097f204878d968648d11328a4b3eba6d6452d262285eecb0d113ec9b2f562572618b6287412d161ee71d188e19d5d3345dc92d0653bc803e083bfe41915542acf16971ff3f2305b81dbb72293cea0b1de2f7b862a4977494991834777a72c56f71cae3370826ce5f900d28687f3568ea24b75ff8a48de0cd2bbac4aa2e40fd14711d067f2781c334986d060c62c79763aaba10af19009e9d32184301a96699d6d4cbb70e901640cbec7c2234ca655ef4047a08c431e70afcab947abbb24391cb2a8912b7bf2a5e9f56600eb2c43c9317241b9c580ec834c596f561c44b5d750ab0c3e76df20a830a34ecc21b57a34264518bd9022035c8947a3a69301449c5fa02ba60add162e812eda1360453cdd3c5c6318d62e1129a9e4f17ff02b6ad5ccc8b0eea543dfc60bcb277dbcf0ed54bc9150a44033d7b9fb1b9d3622b07974b6e68134dbf347c08040c9db5a034229e424c2e23fa8664d0e837fa3ddf4fa1592fca5a71a3c72a91618e8735cb8d8ec079cd0028cdd72d59734c21ca46e95b3f93c6358001794dcf62d52e591a6e03c83b5f5993c4d1e33a753870557a008de3c88708359824509448b7917b0bcf9c0c6b7745df9fed522daaa05c14bc087e640cd656fa9811b47ce15d3d43336a72f42cbadba8affca456b831a5c16557b2d74bd5222781b247020e094f4bb53bb37e0593ee90c30a4bb1ea51d818e64108ac32076761a9f0e9cd42ebc7e4a9033a60b75ed439ae11a63c88a7b4f3cc541354ecdc62c2df59e8b000522ec2168c68843188c0e41ab77a1468cbca27655e7cf0a1911a911fac2d528d344fdb9032eec2aea9eaf2ae8978504fe7613df48dae15a8c26c769bd3eec95ef96a85881d090fbd829cbc9901b4da63757b226521b30122042f886afaed4c409065afe41bbd909c5cf33bd4bdfa8cd79dd46feb6fb1afbaa5d059d2e7d69c5830aa9991640baac6c03f6ada2f99e42e60ec08f57d940c7d365a7de7c6bcb2beb7c8c494f1706889c3364f9e26f182a89b22e871746787664ac05bcf31bfd8ef2638b1242cee158205e6d1408151e434264c51f51cd58a52d04bfd20d94a179d67730ce34ca0fdb0ac102c9391fae579d6668296ec94058a41708bf8d86f4693e8b667b808e72a790779bad1a88dad46f6b3f30d73027335f4702dd7253b8549548de57f08a0e0412c6a1db25475c1cdc89d80f0d9f8e8c4690a98c411728b3ef01d6590c16074dcda4fcf58ae6e8d1875f96c3b357ad59bcb6cf1fa9662708cda514b313b6d7c162c4833c6e59a9f0614f390b67c672cf9afaab37051c6fe98755275a40d0ef3fbe8c8cadf37b8bed4526e8ae833bd3a752031e23204c0fb72b596b796843e0ed97e5e2854151f2ffedf820eaef030032fbe4437c9ecf55358d7f53c56743ca2e6bfdd842cb36b35115f7bb3b1b10fb79c8a3b7ef69016999cc6a157209128400198b0eaeb7306f4b7fa7c2f1461b0acd307a7a83d480edc43b71999ed08e1c0c066ea20879c2e277738aa1bbe6adf33009b2efa6d19aa9bb69641692fc1f108072485333723d626d6216d732687b4d3e8a98e140d9b22b7ad95ad47832a3aaf4799a2b8a96a4dfa32f2e3e9baa4164d513e9d2f28405f6edf46370ff9a4baac5e5baf87a974abca3b5702b6a9ad2b0e0d30be67dff33727d356ef83c2a43e16d5e3a2583de8a115e5fab247025323b6b5675f649ecd0016b73ed7f7a8f2427abc12ddcbe4e6de2470eed8fbd9498560120806c822426260c0638e672a6c80cd6022fa18f5c478ccf12c47e0ac0724f648b618b06c0250c366bbf90d17bd5cd677dcf515ad8f7445fa88ce97d5b59da6765c1597b1a725c5ac7fbf102185c93a70095745ce2fcab777659f8b0e558f470b80c1ba5147751e4db0e9ce48ac806238e66d6f7cbefddfc103e83785044c43d95222a60c813a748d4a2e50bfc7856580f8d621a608819c8d131843341830c4f0b8249a9018b0e0e3e9599bf2a2ce8f54caf96ed7b5eda66593394483fc17f0a0cf8887ade4faf41fc83c81be4a8d6d3a774e70bc55b405f071d6e05dbb8c037fe07b666aaf73e005035f420863c7ff910537b7120c5b188bb1ab132d22c8dd462904d76246566bffc239093646c59b8d5a3cccadbde16874b3f445e49298f97d0ad66a69bbc2114143a1ebeebafb1fdf1081f7e724c12416d446e140d5f8d1f6a9bf271a6e8ae7fb9040651b13c37624d5846aadd0d623a42f8e6e005288f8f9b5412032c382228e6ca1f6004af87607e805ed6dbd7c867ec9639b7f58641dec736464ff935899a5635b09c8ae454ddb893d0d191376f16e097a43b17073586d28a11369b5e4c453a7ad054c15d9f02bdad8ac37bf4028188d051706d1d5cf2a83c567878251a33ca7fc690674041f142602c0aa830ad1168c3c6309731d7617c88c5b0cdf0c619a9db8590b986ad49c219925d1b7aaa6d2e9ed1ae61eb0193e2e345ff8727b3a5fc2c0a5b8e8ce2738f6b1ad4b0d1092c30278e2b76255d2cc4bc21cbfe5e5b4be6437b6e923a86e5d1f6313530bd0a80bf48aa43f1171b0873f741fc5e73a7962eecceed38350b4e3d475a30ef992fbd5d48c1aaea173d67f2a9ea7ac0f3197863397b9da811fe91bf3cd36e4aa90734fd54d4efe2441402c1f9971f0be81e34277d67b59db2edbf9e28912f374d8522274fb30be6654bbaaf120eeb53fd922712d199bc87babe462c46e6f42336c5c2af232bb5adc5de471ed942af4adde8ed9025b4dc487340eb598f24125856113a625de826d52b8dd7136cc0f42e4f7981b44dcfc2b8ed99e6eedea32648e7b9975b2e1ec723b5d5a8cc1bb2a3d82988e902b84dfbcb5ad05e3389d0b15e518e0cd990743a1d0d86ff6c17d5e9246022f5aff83372c44d0904a1abc7f7174ebd525944495717626274ed986cdc3c7ebd6ac6b379308061102b5bef7872c2000c52a0e02f9119c6096dee7abd7ea646492bd0fddc361743c0131bcf74c648d77a54a7a787b4b73fa9df3f15e37f2a7bbd1b7f0c13b08f9442150ae178195b1e297b78859175051ac2585b909a3807e5cd4e363d9174382dc78912f5bcebf8c627d52ff9b1aed5173a499a4e4a033c555fbc8cce93206525265cd76da02e771335c573c9edba528a421811afcf2d57e1f0677012ea630b2a09466ae44e623b9d666a195878d6d9fe746c60f0153e74852cf4122b82e024b2c8835646df3ea7eabb01b96438bb19285d888a99f258d67895588ca020eb8a6efed96f88227e29d1718bc97638dab4abbe759d675c95f7dd68573deee4f2ddc4ac248e8fe57846e6ebebf9a851eb1b8204f30e91eeff9a85b5f87eab3bae1e0c3998c8f95f7e5faf7279436f19425b647084cf3d8b631494236098231629ef3e158bc5605b143c350c6c64195014d79a9cb60c5cedd69d02a458683772d9aa00590f9fa5d179c137a31a8707e88b8b7585ca32fd607ddf023e9b0e9b9769b0d3a8f9767dbc94ac339a4d1161ae75648927f8466e8cbc0685476d42eb8f7b6d4049e030a2cf066add1427b7232ed0c846e4b85879dfa25fcdc4794bb30500818834a0b347f448653a47cc273de120b602f9d75c98f62a1c80c84b277e30812e5a03b717aeac5aaef7a307a664d6f61718361246208c50cda35325d98938f1b84e92ad44309d957db174b3754cb608b8b37d68404123cda1cfcffe9447a42d45fbd0487cef534d4118929f98f2e558bba50b95b09ee273de72a5227186d1ed9f64691220873492b1c1f67ca4e17a3d8c51a30314324c9792f99fd32fdd59d085e7b5f8a574dfbfe69965453887d89c9fb36e478a4d1477c01a638418533dffcf5b889189a7b3b9555966e64296404e996aa2e81f59fcd710595f095935122e09a69e32e9ce87e7ca3000bff2d45084863f98a570caead6fc282b5a65489756fe9fdff7ae1555c86887a2e462fd61ea17cbc1ceef0d4b209dc4f6d48aba6e4655dc5fd1450cc76d3d42564c151528930b70721556d6cbf43caf6f132a80d7e210105ea1069492c7ee240d7c8e526002e02cbaf3ad696f022a9aa586eef82ceabb7136c3bf1f8fcba85cd18952dcf2bd4593846ad27f3839b5d6611f4fb9de7fb7aa7e6b2dd31d0c55400e6e98ba5196994dd9f6898d2d3c701a29246b99d458023886218309ba937e7ed5997b81b875628aeac49a84646a359c91d3f07435e6a8c94c3740e9cb64174293a6e331a599644fe057df151ad84d78b9ff0968b03f7caee678587a7e291c2cc5b322a949e9c8a66c9a9fc7a514ea6e9878f765adfa84ef4f284b4244bc1e9f42a2524dd422dc846a02f51e9334daa712b1700a5712bdc0c5484c9b91e76438120836292fc2df8dd4a64fd1b8ddf274bf9927948095e35550a2c825ed36d150c716364951a03904d8b71ad636e285a29d492f8352e19b14dd6e4b91a1c44c7266ccc4c028e2edb558936cb5499c5c70980907935e2117594a9c098ec9e72158de177416bfe587edbcc49baa33dabfa875d7f7d1ac09e52bfb2e3717229aede4cdae7111a28d0b7fa0c662b6c75c534e6d79d11faefe7132c367a3fdc1b582c83c2ac6d5cce19ba45f0cc6236da9e6cc65052dc51f44fddd6210ef13a7ccaa33f56ed073a63c912fb20aaa95021112abffe5807c89cfd17eaf020f6f778bae5fb3d100c0023dadf326d9755fba14c672135b05804d937e6525f3bab8c7e88e318d6547c048f08d50a8d4a23972b240b3316b3d585739796db0be64c7b9831e0334a27d781916d57bfad17db30cd95efcab2c6edda0504018fc76cc70aeaf7a28870046817d6abd5ce3bc6b96c24f993356e17723168ebf3d869da0342276eea2bcbd1e30366991897ea172d5830686906bf8985c08d005d69ec3592e6211febd14f43a57d48c36902f988796295d25837bbca6adfc5e0e42335fe5e2727fb934c7c046d3dcf481f59d95d6ec27878bf3d77be4a545749c0a1f7cefe33fb2f9e53afdcf8f5bb892d7d3eb9e0c4017e6d3685108b4dba875175145045528708fe8457b6738e1ec4abc43399673d9bd283023a44536b6aaf6fa2a67b340c3d1575a19068cbb19b1d35ebcf508c5811561483086cdf80fc59f63d8f14f20528edf1676641477321fefe5f8408609dca3e1a67c3c081b72adf614a44623c26f1b68a1aefd6a33007ce4aa1be1855fa579468ce9f70aada42b3b72a520580d8e2677ab3b9d1aa6f5e60c93d3d66f690214fb9e3be441aec619cef23c46d7500c54574da6a241f9fc31d4de8db9998010f7b49c0644878d397fa1140e7b2a296a75df9c50307cdf80ea1356e5a0152f8ecee0513ddf53a504f44ddc91a714a0e017e80258ceab2713cdef5b6fcd22cf7b9930e48df60b02c0972e0cb471d972ab41d71815ddb3fbcbb18bbefd52169b1627632f0e13f72768295c75546afa8a1228425f55f6f09b10eaaaadcc6f46cbabf0079f357f9c08a0923b5956b7110a643490e5516e73864131753acf0bf6d0ae37139e8ef807b00d958af395777d0c1a5910a12cfe2995edd7259d8bfca48db7d68ee20a9dd6aa5d3833aac3e221c7539e218bd4574769cabfded9a91678e561e06f43cd52489e28ec10282030a96c6ab5ab85b9c3a9f9d4295b51026a158fe25a3c4ad1554a2a383b9c5cd6014003800fe88000000000000000000000000010114009300ff01000000000000000000000000000108005500e00000020000d328671a4df9e2b844285134473ed9c3dea41734b93919c6a22b10e8d0a931fea92019eae841232253faaa5fcd58fa4fd94479a7901138aaab1efda92f2583d0"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r3, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r4, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept4$inet6(r4, 0x0, &(0x7f0000000040), 0x80000) shutdown(r4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r7, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={r7, "cda165aecf66ad8af1013848e4a60fb7"}) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x10000, 0x5d, &(0x7f0000000340)=""/93}, {0x2, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "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"}, 0xfe) 15:03:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) fcntl$notify(r2, 0x402, 0x24) (async, rerun: 64) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000017c0)={0x7, 0x0, [{0x5000, 0x76, &(0x7f00000000c0)=""/118}, {0xd000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x1000, 0x68, &(0x7f0000000140)=""/104}, {0x4, 0xbe, &(0x7f0000000340)=""/190}, {0xf000, 0x9f, &(0x7f00000014c0)=""/159}, {0x10000, 0xe6, &(0x7f0000001600)=""/230}, {0x4000, 0x99, &(0x7f0000001700)=""/153}]}) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:34 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x10000, 0x5d, &(0x7f0000000340)=""/93}, {0x2, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "a0995c72b4dbfb81e7b4f112fcfcf91d8352c02915d7db2b02b1e8432d154661717fdcf1e90285ae503e937c2c3f838c818bc026940f9234a351d2696120be3c9619da5d9d5561c0e2379161e0a138059044ecf3e0d07ca584bde77a09c6d40263cb88a626ff176aa053fc88fa30b34263d42ee6b26ca75261ce6d75414f2da6a214553e424684dd566b6418e228aac182db16501bc2e08f27cb6f610db8dfa2afc5fbb93dbe6728ebb1d706ba92b0c40ec0c9977e6e05bcd4b2f976f5f38dbe1dde14dbd525dbcce2fafea57ff0315c618e657c5cee27a591c31db0f4a506287610f03f07d1fe76584ffc5424737902d2e9551d07f6d99c4ac9"}, 0xfe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ftruncate(r0, 0x8) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x10000, 0x5d, &(0x7f0000000340)=""/93}, {0x2, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) (async) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "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"}, 0xfe) (async) 15:03:34 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) fcntl$notify(r2, 0x402, 0x24) dup3(r1, r0, 0x0) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000017c0)={0x7, 0x0, [{0x5000, 0x76, &(0x7f00000000c0)=""/118}, {0xd000, 0x1000, &(0x7f00000004c0)=""/4096}, {0x1000, 0x68, &(0x7f0000000140)=""/104}, {0x4, 0xbe, &(0x7f0000000340)=""/190}, {0xf000, 0x9f, &(0x7f00000014c0)=""/159}, {0x10000, 0xe6, &(0x7f0000001600)=""/230}, {0x4000, 0x99, &(0x7f0000001700)=""/153}]}) 15:03:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x5, 0x0, [{0x10000, 0x42, &(0x7f0000000040)=""/66}, {0x5000, 0xaa, &(0x7f00000000c0)=""/170}, {0xf000, 0x35, &(0x7f0000000180)=""/53}, {0x4000, 0x56, &(0x7f00000001c0)=""/86}, {0x0, 0x8a, &(0x7f0000000240)=""/138}]}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:34 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e18d73dd7b0fc77953c4c3955f426b0fea000000006a000f01df0f01c2b8549d2bd70f23c00f21f83500000c000f23f80faac4e3dd6e44bc00a736f30fc773b5", 0x41}], 0x1, 0x14, &(0x7f0000000180)=[@dstype0={0x6, 0xe}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, 0x0, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, 0x0, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x5, 0x0, [0xfffffffffffffff8, 0x101, 0xff, 0xfff, 0x1], [0x3, 0x1, 0x1, 0x3, 0x8, 0x10001, 0x7, 0x200, 0x80000000, 0xe29a, 0x3f, 0xfffffffffffffffd, 0x3, 0x400, 0x1, 0x9, 0x1, 0x4, 0x3f, 0x2, 0x5, 0x4, 0x45d4, 0x5, 0x2, 0x3, 0x4, 0x400, 0x40, 0x10000, 0x8, 0x1, 0xffffffff, 0x7fffffff, 0xc1e, 0x80000001, 0x9, 0x78, 0x4, 0x5, 0x4, 0x1, 0x6, 0x8000000000000001, 0x6edc, 0x0, 0xceef, 0x3f, 0x8, 0x3, 0x80, 0x18, 0x8, 0x4, 0xd2b, 0xfffffffffffffc00, 0x7, 0x6, 0x63a, 0x8, 0x1, 0x8, 0x8, 0x92, 0x7ff, 0x6, 0x7, 0x91, 0xb8, 0x12, 0x8, 0x2, 0x8, 0x4, 0x0, 0x2, 0x5, 0x70e, 0x10001, 0x3, 0x3, 0x0, 0x8409, 0xfffffffeffffffff, 0x7, 0x2, 0x7, 0x4, 0x3ff, 0x2f8, 0x4f7, 0x7, 0x5, 0x1, 0x4, 0x9, 0x7ff, 0x7, 0x3, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x800, 0x100000000, 0x2, 0x9, 0x7ff, 0xf0b, 0x1f, 0x7, 0xef8, 0x9, 0x0, 0x256, 0x0, 0x5, 0x5, 0x7, 0xffffffffffff7f9b, 0x3]}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (rerun: 32) 15:03:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x698, 0x90000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x2e, &(0x7f00000003c0)=""/46, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x7, 0x7fff}, 0x10}, 0x80) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r14, 0xf501, 0x0) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1200}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x5, 0x0, [{0x10000, 0x42, &(0x7f0000000040)=""/66}, {0x5000, 0xaa, &(0x7f00000000c0)=""/170}, {0xf000, 0x35, &(0x7f0000000180)=""/53}, {0x4000, 0x56, &(0x7f00000001c0)=""/86}, {0x0, 0x8a, &(0x7f0000000240)=""/138}]}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x8) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x10000, 0x5d, &(0x7f0000000340)=""/93}, {0x2, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) (async) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "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"}, 0xfe) 15:03:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x5, 0x0, [{0x10000, 0x42, &(0x7f0000000040)=""/66}, {0x5000, 0xaa, &(0x7f00000000c0)=""/170}, {0xf000, 0x35, &(0x7f0000000180)=""/53}, {0x4000, 0x56, &(0x7f00000001c0)=""/86}, {0x0, 0x8a, &(0x7f0000000240)=""/138}]}) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup3(r1, r0, 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000040), 0x698, 0x90000) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) (async, rerun: 64) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async, rerun: 64) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x2e, &(0x7f00000003c0)=""/46, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x7, 0x7fff}, 0x10}, 0x80) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r14, 0xf501, 0x0) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1200}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:35 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) (async) r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e18d73dd7b0fc77953c4c3955f426b0fea000000006a000f01df0f01c2b8549d2bd70f23c00f21f83500000c000f23f80faac4e3dd6e44bc00a736f30fc773b5", 0x41}], 0x1, 0x14, &(0x7f0000000180)=[@dstype0={0x6, 0xe}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4e18d73dd7b0fc77953c4c3955f426b0fea000000006a000f01df0f01c2b8549d2bd70f23c00f21f83500000c000f23f80faac4e3dd6e44bc00a736f30fc773b5", 0x41}], 0x1, 0x14, &(0x7f0000000180)=[@dstype0={0x6, 0xe}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, 0x0, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x5, 0x0, [0xfffffffffffffff8, 0x101, 0xff, 0xfff, 0x1], [0x3, 0x1, 0x1, 0x3, 0x8, 0x10001, 0x7, 0x200, 0x80000000, 0xe29a, 0x3f, 0xfffffffffffffffd, 0x3, 0x400, 0x1, 0x9, 0x1, 0x4, 0x3f, 0x2, 0x5, 0x4, 0x45d4, 0x5, 0x2, 0x3, 0x4, 0x400, 0x40, 0x10000, 0x8, 0x1, 0xffffffff, 0x7fffffff, 0xc1e, 0x80000001, 0x9, 0x78, 0x4, 0x5, 0x4, 0x1, 0x6, 0x8000000000000001, 0x6edc, 0x0, 0xceef, 0x3f, 0x8, 0x3, 0x80, 0x18, 0x8, 0x4, 0xd2b, 0xfffffffffffffc00, 0x7, 0x6, 0x63a, 0x8, 0x1, 0x8, 0x8, 0x92, 0x7ff, 0x6, 0x7, 0x91, 0xb8, 0x12, 0x8, 0x2, 0x8, 0x4, 0x0, 0x2, 0x5, 0x70e, 0x10001, 0x3, 0x3, 0x0, 0x8409, 0xfffffffeffffffff, 0x7, 0x2, 0x7, 0x4, 0x3ff, 0x2f8, 0x4f7, 0x7, 0x5, 0x1, 0x4, 0x9, 0x7ff, 0x7, 0x3, 0x2, 0x9, 0x9, 0xfffffffffffffffb, 0x800, 0x100000000, 0x2, 0x9, 0x7ff, 0xf0b, 0x1f, 0x7, 0xef8, 0x9, 0x0, 0x256, 0x0, 0x5, 0x5, 0x7, 0xffffffffffff7f9b, 0x3]}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x1000, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xdd, &(0x7f0000000040)=""/221}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2}) 15:03:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x10000}, 0x10, 0x0, r5}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r4, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r8 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x48800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000240)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000280}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x2, 0x70bd2c, 0x6417faf9, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x31f324664b8b0137}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'y]-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00ec004a7e8bcdf1e8137c2fce5f6b59120d90b1a920000020b15b087e746edf4724a936ea194336b5bfb1e73b497b0000ff01000000004ee5eb2167", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x1000, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xdd, &(0x7f0000000040)=""/221}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x1000, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xdd, &(0x7f0000000040)=""/221}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2}) 15:03:35 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x101400) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x2000c0, 0x0) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r11, 0x4008af20, &(0x7f0000000780)={0x697496fba6bf6e53, r12}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x8, 0x0, [{0x0, 0x98, &(0x7f00000000c0)=""/152}, {0xf000, 0x3, &(0x7f0000000180)=""/3}, {0x0, 0xb, &(0x7f00000001c0)=""/11}, {0x1, 0xd4, &(0x7f0000000200)=""/212}, {0x0, 0xad, &(0x7f0000000440)=""/173}, {0x20a3e933d73c5cf9, 0x3, &(0x7f0000000340)=""/3}, {0x4000, 0xb0, &(0x7f0000000500)=""/176}, {0xd000, 0x3a, &(0x7f0000000380)=""/58}]}) 15:03:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x1000, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xdd, &(0x7f0000000040)=""/221}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x1000, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xdd, &(0x7f0000000040)=""/221}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:35 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x2}) 15:03:35 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) 15:03:35 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:35 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x698, 0x90000) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x698, 0x90000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x2e, &(0x7f00000003c0)=""/46, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x7, 0x7fff}, 0x10}, 0x80) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x2e, &(0x7f00000003c0)=""/46, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x7, 0x7fff}, 0x10}, 0x80) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r14, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r14, 0xf501, 0x0) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1200}) (async) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1200}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:35 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x101400) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) (async) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x2000c0, 0x0) (async) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r11, 0x4008af20, &(0x7f0000000780)={0x697496fba6bf6e53, r12}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x8, 0x0, [{0x0, 0x98, &(0x7f00000000c0)=""/152}, {0xf000, 0x3, &(0x7f0000000180)=""/3}, {0x0, 0xb, &(0x7f00000001c0)=""/11}, {0x1, 0xd4, &(0x7f0000000200)=""/212}, {0x0, 0xad, &(0x7f0000000440)=""/173}, {0x20a3e933d73c5cf9, 0x3, &(0x7f0000000340)=""/3}, {0x4000, 0xb0, &(0x7f0000000500)=""/176}, {0xd000, 0x3a, &(0x7f0000000380)=""/58}]}) 15:03:36 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) 15:03:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x10000}, 0x10, 0x0, r5}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r4, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) r8 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x48800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000240)) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000280}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x2, 0x70bd2c, 0x6417faf9, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x31f324664b8b0137}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'y]-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}}, 0x4000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00ec004a7e8bcdf1e8137c2fce5f6b59120d90b1a920000020b15b087e746edf4724a936ea194336b5bfb1e73b497b0000ff01000000004ee5eb2167", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:36 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) 15:03:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:36 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x101400) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r10 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r10, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) (async) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x2000c0, 0x0) (async) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r11, 0x4008af20, &(0x7f0000000780)={0x697496fba6bf6e53, r12}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)={0x8, 0x0, [{0x0, 0x98, &(0x7f00000000c0)=""/152}, {0xf000, 0x3, &(0x7f0000000180)=""/3}, {0x0, 0xb, &(0x7f00000001c0)=""/11}, {0x1, 0xd4, &(0x7f0000000200)=""/212}, {0x0, 0xad, &(0x7f0000000440)=""/173}, {0x20a3e933d73c5cf9, 0x3, &(0x7f0000000340)=""/3}, {0x4000, 0xb0, &(0x7f0000000500)=""/176}, {0xd000, 0x3a, &(0x7f0000000380)=""/58}]}) 15:03:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x3}) 15:03:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) dup3(r1, r0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfff]}, 0x8, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = dup2(0xffffffffffffffff, r0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ftruncate(r5, 0xfff) 15:03:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0x192}) 15:03:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) dup3(r1, r0, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfff]}, 0x8, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 32) r4 = dup2(0xffffffffffffffff, r0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ftruncate(r5, 0xfff) 15:03:36 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400100, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x1}) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) truncate(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="2b01"]) 15:03:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) dup3(r1, r0, 0x0) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfff]}, 0x8, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) r4 = dup2(0xffffffffffffffff, r0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r4, 0x4004af77, 0xfffffffffffffffe) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ftruncate(r5, 0xfff) 15:03:36 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x3}) 15:03:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r4 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x10000}, 0x10, 0x0, r5}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r4, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40086602, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) (async) r8 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x660c, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x48800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000240)) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000280}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x2, 0x70bd2c, 0x6417faf9, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x31f324664b8b0137}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'y]-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00ec004a7e8bcdf1e8137c2fce5f6b59120d90b1a920000020b15b087e746edf4724a936ea194336b5bfb1e73b497b0000ff01000000004ee5eb2167", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:36 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0x192}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0x192}) 15:03:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0x192}) 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}}, 0x0) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x3}) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x3}) 15:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400030400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000011400060002000000040000140f38ae6d59c1925ed3d2e06d0000000065f5d3d74725b0761922f0cc44094d74f40e43d7531603709e2ebef7b738d54a65471ca728b115f5980000d53fb3626b460123fd8134ef0ee25608a781d402fcb30000000000"], 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0xc008af12, &(0x7f0000000080)) mmap(&(0x7f0000a0f000/0x1000)=nil, 0x1000, 0x5, 0x10, r10, 0xb29a7000) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_dellink={0x28, 0x11, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r12, 0x10000}, [@IFLA_CARRIER={0x5, 0x21, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x200088c0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r13, 0x4004af77, 0xfffffffffffffffe) r14 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2c022, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r13, 0x8008af73, &(0x7f0000000140)={0x0, 0x8f, ""/143}) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) ioctl$VHOST_SET_VRING_KICK(r14, 0x4008af20, &(0x7f00000000c0)={0x1, r15}) 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}}, 0x0) (async) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@local}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x404000) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0x6, 0x7a8}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:37 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0xbf7fe5dccde05dda, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) r6 = gettid() r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f00000002c0)={r9}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x12, 0x7, 0x8, 0x6, 0x0, 0xff, 0x9000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x47d5, 0xc5}, 0x88005, 0x30000000000, 0x8000, 0x1, 0x6, 0x2, 0x9, 0x0, 0xffffffff, 0x0, 0x8}, r6, 0xf, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400100, 0x20) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x1}) (async) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="2b01"]) (rerun: 32) [ 2567.697446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2567.751168] syz-executor.0 (19211): drop_caches: 2 [ 2567.769189] syz-executor.0 (19211): drop_caches: 2 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@local}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x404000) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0x6, 0x7a8}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}}, 0x0) 15:03:37 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400100, 0x20) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x1}) r4 = dup3(r2, r2, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x3, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xce, &(0x7f0000000240)=""/206}, {0x0, 0x1000, &(0x7f0000002cc0)=""/4096}]}) truncate(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="2b01"]) 15:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400030400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000011400060002000000040000140f38ae6d59c1925ed3d2e06d0000000065f5d3d74725b0761922f0cc44094d74f40e43d7531603709e2ebef7b738d54a65471ca728b115f5980000d53fb3626b460123fd8134ef0ee25608a781d402fcb30000000000"], 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (rerun: 32) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r10, 0xc008af12, &(0x7f0000000080)) (rerun: 32) mmap(&(0x7f0000a0f000/0x1000)=nil, 0x1000, 0x5, 0x10, r10, 0xb29a7000) (async) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_dellink={0x28, 0x11, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r12, 0x10000}, [@IFLA_CARRIER={0x5, 0x21, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x200088c0) (async) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r13, 0x4004af77, 0xfffffffffffffffe) (async, rerun: 32) r14 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2c022, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r13, 0x8008af73, &(0x7f0000000140)={0x0, 0x8f, ""/143}) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) ioctl$VHOST_SET_VRING_KICK(r14, 0x4008af20, &(0x7f00000000c0)={0x1, r15}) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@local}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x404000) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0x6, 0x7a8}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@local}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x404000) (async) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000000c0)={0x6, 0x7a8}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) dup3(r2, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x5f, @mcast2, 0x14b}, 0x1c) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000040)=ANY=[@ANYBLOB="67916d28322d38a58e0542c9330ad10327602b615d"]) 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffe, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xfffffffe, 0x1, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x65, [@multicast2, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x80, 0x80, 0x5, 0x4}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x188, 0x0, 0x300, 0x3, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfffffdb7}, 0x1, 0x0, 0x0, 0x4000001}, 0x633d32c38d033d22) [ 2568.060666] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 15:03:37 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r5, 0x0) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0xbf7fe5dccde05dda, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) r6 = gettid() (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f00000002c0)={r9}) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x12, 0x7, 0x8, 0x6, 0x0, 0xff, 0x9000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x47d5, 0xc5}, 0x88005, 0x30000000000, 0x8000, 0x1, 0x6, 0x2, 0x9, 0x0, 0xffffffff, 0x0, 0x8}, r6, 0xf, 0xffffffffffffffff, 0x8) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) [ 2568.146871] syz-executor.0 (19244): drop_caches: 2 [ 2568.217053] syz-executor.0 (19244): drop_caches: 2 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffe, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xfffffffe, 0x1, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x65, [@multicast2, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x80, 0x80, 0x5, 0x4}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x188, 0x0, 0x300, 0x3, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfffffdb7}, 0x1, 0x0, 0x0, 0x4000001}, 0x633d32c38d033d22) 15:03:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001400030400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002000000000000011400060002000000040000140f38ae6d59c1925ed3d2e06d0000000065f5d3d74725b0761922f0cc44094d74f40e43d7531603709e2ebef7b738d54a65471ca728b115f5980000d53fb3626b460123fd8134ef0ee25608a781d402fcb30000000000"], 0x48}}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r7, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r10, 0xc008af12, &(0x7f0000000080)) (async, rerun: 32) mmap(&(0x7f0000a0f000/0x1000)=nil, 0x1000, 0x5, 0x10, r10, 0xb29a7000) (async, rerun: 32) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r6, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r8, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r9}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_dellink={0x28, 0x11, 0x100, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r12, 0x10000}, [@IFLA_CARRIER={0x5, 0x21, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x200088c0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r13, 0x4004af77, 0xfffffffffffffffe) (async) r14 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2c022, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r13, 0x8008af73, &(0x7f0000000140)={0x0, 0x8f, ""/143}) r15 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) ioctl$VHOST_SET_VRING_KICK(r14, 0x4008af20, &(0x7f00000000c0)={0x1, r15}) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r4 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, 0xffffffffffffffff, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r4, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x220, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc5}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfffffff9}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '&!\x00'}]}}}]}, @NFTA_RULE_USERDATA={0x5b, 0x7, 0x1, 0x0, "08cd7963f28acb558c763a4adf75b3eb4de2c5b754cfaa50ae6b304c6a7105f2865d672c957715fa389810222e37b957815970623b4933a5e1fd4c8c2117da95e88391a024fc80c975697694627e7025ea14cbdfba9859"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x1a, 0x1, 'net/ip_tables_matches\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, '\'\'\a}{%!!\x00'}, @NFTA_MATCH_NAME={0x6, 0x1, '$\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x48, 0x3, "7f31d7e2a0f9fda3c550a5624568232e1f8e2ebe1e064c064bd5433cabf2bfaf1fc5c239c374a925184668019e010c46bfab43be4a53a0162626db5b0ca836c77d7e9030"}, @NFTA_MATCH_NAME={0xd, 0x1, 'threaded\x00'}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_INFO={0x59, 0x3, "c1813c9036f1efd282e9cd7aa8099447bc10dd9e90439771fb7b181183f6782eccef07531bca5fb79a97838a65f52803b1d568d55e44728cd4f4500338c407344cb820985780bff47159ed00a22749ce159a32bdeb"}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x194, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "b7f13d0119660bcc95f59962a812f49664f29cb8745d14208ef09fb8758ba682375161436b91b8392b0f28bc350774935c20df0ccd46102d79581c453d472cff73fce6757a252f54bc7c72b71767c4f771461dcf827894ee0cc024ec97f9c925ea42519f9ed2984875fa6addd83de76501772ddefdababbc62948937fc6d41996d40e43bb09bcdf081908c7ce49520ad581b85af82824ad8c15e48385d9dadffb06d79e94aac10b207d56c914a49adda28d7f57683df683a2551ad479572a90067745ac154d9261d68ab21dd35c1b0c908b27303a494a5180b58be2e0578137cc92419274129f8a1f02f5d079c"}, @NFTA_TABLE_USERDATA={0x66, 0x6, "f37c43af191368b817f7a9791588e5be58b4c7915bbd204b17885a32ad2e859f808a8cf6e161d454fb01ef269c5ba47fe6508ee7e9bd128e321211289f59d683219ea8a2ed37dee60a7b317bee1475f0ab6c7fb1929c05724e91ff234c7234c45e4a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x3f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x60c81f9390684a3c) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000540)=ANY=[@ANYBLOB="885f25bf2c3347cb3f351004c8f90d91b75923dbaf85b8cc99dcc99579f65724c9eb9a87e7e5b41fdb4bbcf1b657c83b0f877fd02499f0fe906cf221ad8ca73ce1089b96e42a362a11edc5fa7570cd098b4f6f456fa3d96a5df8b43af3dd876d9f33f656025903b664660f921bd8ae9772cac66d8cd60934661f000f17d038515935590bf0256ae9bd6711908cbb801837dd9cc179a5a36db87b289c4999ebe3421169a1a75d240479183b60ee76942540e630431a15251cfe"]) 15:03:37 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x60, 0x870) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r5, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0xbf7fe5dccde05dda, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) r6 = gettid() r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f00000002c0)={r9}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x12, 0x7, 0x8, 0x6, 0x0, 0xff, 0x9000, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x47d5, 0xc5}, 0x88005, 0x30000000000, 0x8000, 0x1, 0x6, 0x2, 0x9, 0x0, 0xffffffff, 0x0, 0x8}, r6, 0xf, 0xffffffffffffffff, 0x8) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (rerun: 32) 15:03:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffe, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xfffffffe, 0x1, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x65, [@multicast2, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x80, 0x80, 0x5, 0x4}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x188, 0x0, 0x300, 0x3, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfffffdb7}, 0x1, 0x0, 0x0, 0x4000001}, 0x633d32c38d033d22) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0xfffffffe, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x7800, 0xfffffffe, 0x1, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1b, 0x65, [@multicast2, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x0, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x80, 0x80, 0x5, 0x4}}) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x188, 0x0, 0x300, 0x3, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfffffdb7}, 0x1, 0x0, 0x0, 0x4000001}, 0x633d32c38d033d22) (async) 15:03:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x440200, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000080)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) [ 2568.497840] syz-executor.0 (19293): drop_caches: 2 [ 2568.520089] syz-executor.0 (19293): drop_caches: 2 15:03:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x40200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x4c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xfff2, 0x2}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r13, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r13, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000180)=""/25, &(0x7f00000004c0)=""/4096, &(0x7f00000001c0)=""/97, 0x100000}) creat(&(0x7f0000000040)='./file0\x00', 0x2) r14 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x5d, &(0x7f0000000240)=""/93}, {0x2000, 0xca, &(0x7f0000000080)=""/202}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)) 15:03:38 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x4) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00edd747f25f6433943eee3d860000", @ANYRES16=r12, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r13, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x8040000) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x4) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00edd747f25f6433943eee3d860000", @ANYRES16=r12, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) (async) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r13, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x8040000) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)) (async) 15:03:38 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendto$inet6(r10, &(0x7f0000000100)="99491ec6a9eca2e62c0e008bb48d2e4f66c35a96af70e58f3d6020661a1836f203a342b2cc7eb50e05c43ad95e702a55668aca4143c1ceb147e6017d4063138c997d273efdb1923a9dbea2a50feaa211831fc984b3406ef921b1e4b22dd212e9d7164234a7c20c21c9d74bb188ea85bf1a79798daed79f318eb7c19908cf550a3f6002d63a914d7b417da747b3695c3a0f87a8817f4c2ff31c24408fd9742cf6425503bcc60da959ad48a6894e7b643759d010eb03", 0xb5, 0x800, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xe2}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x40200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x4c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xfff2, 0x2}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r13, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r13, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000180)=""/25, &(0x7f00000004c0)=""/4096, &(0x7f00000001c0)=""/97, 0x100000}) creat(&(0x7f0000000040)='./file0\x00', 0x2) r14 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x5d, &(0x7f0000000240)=""/93}, {0x2000, 0xca, &(0x7f0000000080)=""/202}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)) 15:03:38 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async, rerun: 32) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x4) (async, rerun: 32) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00edd747f25f6433943eee3d860000", @ANYRES16=r12, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe0, r13, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x8040000) 15:03:38 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendto$inet6(r10, &(0x7f0000000100)="99491ec6a9eca2e62c0e008bb48d2e4f66c35a96af70e58f3d6020661a1836f203a342b2cc7eb50e05c43ad95e702a55668aca4143c1ceb147e6017d4063138c997d273efdb1923a9dbea2a50feaa211831fc984b3406ef921b1e4b22dd212e9d7164234a7c20c21c9d74bb188ea85bf1a79798daed79f318eb7c19908cf550a3f6002d63a914d7b417da747b3695c3a0f87a8817f4c2ff31c24408fd9742cf6425503bcc60da959ad48a6894e7b643759d010eb03", 0xb5, 0x800, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xe2}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xe2}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xac}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0x1f}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2, 0x7709}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xd2, &(0x7f0000000340)=""/210}]}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[@ANYBLOB="00de00000000000060db9a25c8dea330b7b5fe6f769f64e37b636821f831a17dfa0acd83aa849e33ffbf886e70816f851c12d8e0a8a166480b270851c818ee6db0cc113e5625cc2d63d716ed370896cca7742aad3614873f5abd145ff380aaf3e76aae857d66e49e773cdedcb27715205b7e0f56e055807137b228571d4e39aef4c55ac1f90cd80cf0d6f00f29c8cca0c4ddf33d125ef4a9cfc0576de6f1e68ac00584f59bb8424907425992ce9828f8a0526a033853efad069d3f5d8e91ead3a979e95b11ad76afa32e96b7b09e0eb7326bb76b422cdc8798346d4b07898716901f0627914b5a017b208907acb6818d6c8635d5fbe8efab59bb49cad6923b8e1fa4e3fcac94f0c7f06e97f77ba5e66fcd79a23d8f5af2aafff828ee447eb3a7766b1cc9896348cc914b647dcf37ab5e0c22c1a223ba"]) 15:03:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:38 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x40200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x4c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0xfff2, 0x2}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r13, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r13, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000180)=""/25, &(0x7f00000004c0)=""/4096, &(0x7f00000001c0)=""/97, 0x100000}) creat(&(0x7f0000000040)='./file0\x00', 0x2) r14 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r14, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x5d, &(0x7f0000000240)=""/93}, {0x2000, 0xca, &(0x7f0000000080)=""/202}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xac}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0x1f}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)) 15:03:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xac}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0x1f}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0x1f}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2, 0x7709}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xd2, &(0x7f0000000340)=""/210}]}) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 15:03:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) kcmp(r1, r2, 0x6, r0, r3) 15:03:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x2, 0x7709}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xd2, &(0x7f0000000340)=""/210}]}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r3}, 0x8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 15:03:39 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) sendto$inet6(r10, &(0x7f0000000100)="99491ec6a9eca2e62c0e008bb48d2e4f66c35a96af70e58f3d6020661a1836f203a342b2cc7eb50e05c43ad95e702a55668aca4143c1ceb147e6017d4063138c997d273efdb1923a9dbea2a50feaa211831fc984b3406ef921b1e4b22dd212e9d7164234a7c20c21c9d74bb188ea85bf1a79798daed79f318eb7c19908cf550a3f6002d63a914d7b417da747b3695c3a0f87a8817f4c2ff31c24408fd9742cf6425503bcc60da959ad48a6894e7b643759d010eb03", 0xb5, 0x800, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xe2}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) (async, rerun: 32) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) (async) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) kcmp(r1, r2, 0x6, r0, r3) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200, 0x1e) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000073222dc0a9491ca40000000800020005000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x48000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r8) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x51}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc080) 15:03:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendto$inet6(r10, &(0x7f0000000100)="99491ec6a9eca2e62c0e008bb48d2e4f66c35a96af70e58f3d6020661a1836f203a342b2cc7eb50e05c43ad95e702a55668aca4143c1ceb147e6017d4063138c997d273efdb1923a9dbea2a50feaa211831fc984b3406ef921b1e4b22dd212e9d7164234a7c20c21c9d74bb188ea85bf1a79798daed79f318eb7c19908cf550a3f6002d63a914d7b417da747b3695c3a0f87a8817f4c2ff31c24408fd9742cf6425503bcc60da959ad48a6894e7b643759d010eb03", 0xb5, 0x800, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xe2}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r1, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT], 0x1c}}, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000b26bd700000dbdf250200000008000400640101022d00070073797374656d5f753a6d696e5f70617e7377645f657865635f743a733000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046b40)={0xffffffffffffffff, [], 0x3, "c8a85f21631cf4"}) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) (async) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) kcmp(r1, r2, 0x6, r0, r3) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200, 0x1e) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200, 0x1e) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000073222dc0a9491ca40000000800020005000000"], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x48000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r8) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x51}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc080) 15:03:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r1, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r1, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT], 0x1c}}, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000b26bd700000dbdf250200000008000400640101022d00070073797374656d5f753a6d696e5f70617e7377645f657865635f743a733000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046b40)={0xffffffffffffffff, [], 0x3, "c8a85f21631cf4"}) (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r12}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:39 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6040, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000180)={0x100, 0x8001, 0x4b1, 0x0, 0xb, 0x4}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4a100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb3, 0x4, @perf_config_ext={0x7, 0x3}, 0x2, 0xffffffff00000000, 0x9, 0x4, 0xa98c, 0x5, 0x2, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0x4, r2, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000080)) (rerun: 32) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6040, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000180)={0x100, 0x8001, 0x4b1, 0x0, 0xb, 0x4}) (async) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4a100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb3, 0x4, @perf_config_ext={0x7, 0x3}, 0x2, 0xffffffff00000000, 0x9, 0x4, 0xa98c, 0x5, 0x2, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0x4, r2, 0x2) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x200, 0x1e) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, 0xe8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) r9 = accept4$inet6(r7, 0x0, &(0x7f0000000e80), 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000004880)=ANY=[@ANYBLOB='\b\x00E\x00', @ANYRES32, @ANYBLOB="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"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r6, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r7, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r7, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept4$inet6(r7, 0x0, &(0x7f0000000040), 0x80000) shutdown(r7, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r10, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000900)={0x0, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d00)={0x4, 0x3, {0xfffffffffffffffb, @usage=0x3, 0x0, 0x2, 0x1, 0x7fff, 0x4, 0xffffffffffffffff, 0x81, @usage=0x4, 0x8000, 0xffffffff, [0x4, 0xffffffff7fffffff, 0x6363eacb, 0x6, 0x8, 0x8]}, {0x8, @struct={0x1, 0xfff}, r10, 0x8, 0x10000, 0x5, 0x3, 0x7, 0x804, @struct={0x7, 0x9}, 0x1ff, 0xfffff000, [0xffff, 0x7aea, 0x3f, 0x10001, 0x9, 0x100]}, {0x34d, @struct={0xd8, 0x1000}, r11, 0x7fffffffffffffff, 0x4, 0x9, 0x2, 0x800, 0x41, @struct={0x1c, 0x3}, 0x4b, 0x3, [0x80000001, 0x24368d82, 0x2, 0x9, 0xfffffffffffffc00, 0x1ff]}, {0x4, 0x8, 0x2}}) 15:03:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000073222dc0a9491ca40000000800020005000000"], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x48000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r8) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) (async) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x51}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc080) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) [ 2570.205372] syz-executor.0 (19483): drop_caches: 2 [ 2570.210697] syz-executor.0 (19483): drop_caches: 2 15:03:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r1, 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async, rerun: 32) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT], 0x1c}}, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000b26bd700000dbdf250200000008000400640101022d00070073797374656d5f753a6d696e5f70617e7377645f657865635f743a733000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046b40)={0xffffffffffffffff, [], 0x3, "c8a85f21631cf4"}) (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:39 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6040, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000180)={0x100, 0x8001, 0x4b1, 0x0, 0xb, 0x4}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4a100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb3, 0x4, @perf_config_ext={0x7, 0x3}, 0x2, 0xffffffff00000000, 0x9, 0x4, 0xa98c, 0x5, 0x2, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0x4, r2, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4a100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb3, 0x4, @perf_config_ext={0x7, 0x3}, 0x2, 0xffffffff00000000, 0x9, 0x4, 0xa98c, 0x5, 0x2, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0x4, r2, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) 15:03:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000000001f40700020005000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x404, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6d4f80544b8b3c79}, 0x40) 15:03:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (rerun: 32) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) (async) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async, rerun: 64) r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) (rerun: 64) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r12}) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, 0xe8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) r9 = accept4$inet6(r7, 0x0, &(0x7f0000000e80), 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000004880)=ANY=[@ANYBLOB='\b\x00E\x00', @ANYRES32, @ANYBLOB="000000a2a8b9a0b639729b9aec4412797d769a34b684922e294c83ce9579a1f39149ffa03cb9888625ade27fdd826d25656e24ac7779ea6585faedfaed1d9616134eb35d8e5ee99f2532a5ec90bd1e81dc0a2adc10c9a181a9418108039f55c3d4873d4ae775be52bcb9b204d7e773f32a1c30235d7b87753693a91a5e63c7cdf2a5d2a07113e8dfc2176ad46f9899d3b3ffade15280904c8394d66192aeb9afbfb19befb11e9d45e42c5a914e6156a4ed9bb8befd0ce45a3839da44b955537768208f893ecddb9c58a66746a42b2425b109f0a316d6d0edc89879574da93fd32517f164d27e4d63d4d99f95c7529550c08719179c9152f6069d66b3dfab168ab2d7d4bc34d630623d18070f17b0898e6d1a55c80587daa8efd7ee8296082e06e62a633b81df60ca43d446e3549f3fed79f3097f204878d968648d11328a4b3eba6d6452d262285eecb0d113ec9b2f562572618b6287412d161ee71d188e19d5d3345dc92d0653bc803e083bfe41915542acf16971ff3f2305b81dbb72293cea0b1de2f7b862a4977494991834777a72c56f71cae3370826ce5f900d28687f3568ea24b75ff8a48de0cd2bbac4aa2e40fd14711d067f2781c334986d060c62c79763aaba10af19009e9d32184301a96699d6d4cbb70e901640cbec7c2234ca655ef4047a08c431e70afcab947abbb24391cb2a8912b7bf2a5e9f56600eb2c43c9317241b9c580ec834c596f561c44b5d750ab0c3e76df20a830a34ecc21b57a34264518bd9022035c8947a3a69301449c5fa02ba60add162e812eda1360453cdd3c5c6318d62e1129a9e4f17ff02b6ad5ccc8b0eea543dfc60bcb277dbcf0ed54bc9150a44033d7b9fb1b9d3622b07974b6e68134dbf347c08040c9db5a034229e424c2e23fa8664d0e837fa3ddf4fa1592fca5a71a3c72a91618e8735cb8d8ec079cd0028cdd72d59734c21ca46e95b3f93c6358001794dcf62d52e591a6e03c83b5f5993c4d1e33a753870557a008de3c88708359824509448b7917b0bcf9c0c6b7745df9fed522daaa05c14bc087e640cd656fa9811b47ce15d3d43336a72f42cbadba8affca456b831a5c16557b2d74bd5222781b247020e094f4bb53bb37e0593ee90c30a4bb1ea51d818e64108ac32076761a9f0e9cd42ebc7e4a9033a60b75ed439ae11a63c88a7b4f3cc541354ecdc62c2df59e8b000522ec2168c68843188c0e41ab77a1468cbca27655e7cf0a1911a911fac2d528d344fdb9032eec2aea9eaf2ae8978504fe7613df48dae15a8c26c769bd3eec95ef96a85881d090fbd829cbc9901b4da63757b226521b30122042f886afaed4c409065afe41bbd909c5cf33bd4bdfa8cd79dd46feb6fb1afbaa5d059d2e7d69c5830aa9991640baac6c03f6ada2f99e42e60ec08f57d940c7d365a7de7c6bcb2beb7c8c494f1706889c3364f9e26f182a89b22e871746787664ac05bcf31bfd8ef2638b1242cee158205e6d1408151e434264c51f51cd58a52d04bfd20d94a179d67730ce34ca0fdb0ac102c9391fae579d6668296ec94058a41708bf8d86f4693e8b667b808e72a790779bad1a88dad46f6b3f30d73027335f4702dd7253b8549548de57f08a0e0412c6a1db25475c1cdc89d80f0d9f8e8c4690a98c411728b3ef01d6590c16074dcda4fcf58ae6e8d1875f96c3b357ad59bcb6cf1fa9662708cda514b313b6d7c162c4833c6e59a9f0614f390b67c672cf9afaab37051c6fe98755275a40d0ef3fbe8c8cadf37b8bed4526e8ae833bd3a752031e23204c0fb72b596b796843e0ed97e5e2854151f2ffedf820eaef030032fbe4437c9ecf55358d7f53c56743ca2e6bfdd842cb36b35115f7bb3b1b10fb79c8a3b7ef69016999cc6a157209128400198b0eaeb7306f4b7fa7c2f1461b0acd307a7a83d480edc43b71999ed08e1c0c066ea20879c2e277738aa1bbe6adf33009b2efa6d19aa9bb69641692fc1f108072485333723d626d6216d732687b4d3e8a98e140d9b22b7ad95ad47832a3aaf4799a2b8a96a4dfa32f2e3e9baa4164d513e9d2f28405f6edf46370ff9a4baac5e5baf87a974abca3b5702b6a9ad2b0e0d30be67dff33727d356ef83c2a43e16d5e3a2583de8a115e5fab247025323b6b5675f649ecd0016b73ed7f7a8f2427abc12ddcbe4e6de2470eed8fbd9498560120806c822426260c0638e672a6c80cd6022fa18f5c478ccf12c47e0ac0724f648b618b06c0250c366bbf90d17bd5cd677dcf515ad8f7445fa88ce97d5b59da6765c1597b1a725c5ac7fbf102185c93a70095745ce2fcab777659f8b0e558f470b80c1ba5147751e4db0e9ce48ac806238e66d6f7cbefddfc103e83785044c43d95222a60c813a748d4a2e50bfc7856580f8d621a608819c8d131843341830c4f0b8249a9018b0e0e3e9599bf2a2ce8f54caf96ed7b5eda66593394483fc17f0a0cf8887ade4faf41fc83c81be4a8d6d3a774e70bc55b405f071d6e05dbb8c037fe07b666aaf73e005035f420863c7ff910537b7120c5b188bb1ab132d22c8dd462904d76246566bffc239093646c59b8d5a3cccadbde16874b3f445e49298f97d0ad66a69bbc2114143a1ebeebafb1fdf1081f7e724c12416d446e140d5f8d1f6a9bf271a6e8ae7fb9040651b13c37624d5846aadd0d623a42f8e6e005288f8f9b5412032c382228e6ca1f6004af87607e805ed6dbd7c867ec9639b7f58641dec736464ff935899a5635b09c8ae454ddb893d0d191376f16e097a43b17073586d28a11369b5e4c453a7ad054c15d9f02bdad8ac37bf4028188d051706d1d5cf2a83c567878251a33ca7fc690674041f142602c0aa830ad1168c3c6309731d7617c88c5b0cdf0c619a9db8590b986ad49c219925d1b7aaa6d2e9ed1ae61eb0193e2e345ff8727b3a5fc2c0a5b8e8ce2738f6b1ad4b0d1092c30278e2b76255d2cc4bc21cbfe5e5b4be6437b6e923a86e5d1f6313530bd0a80bf48aa43f1171b0873f741fc5e73a7962eecceed38350b4e3d475a30ef992fbd5d48c1aaea173d67f2a9ea7ac0f3197863397b9da811fe91bf3cd36e4aa90734fd54d4efe2441402c1f9971f0be81e34277d67b59db2edbf9e28912f374d8522274fb30be6654bbaaf120eeb53fd922712d199bc87babe462c46e6f42336c5c2af232bb5adc5de471ed942af4adde8ed9025b4dc487340eb598f24125856113a625de826d52b8dd7136cc0f42e4f7981b44dcfc2b8ed99e6eedea32648e7b9975b2e1ec723b5d5a8cc1bb2a3d82988e902b84dfbcb5ad05e3389d0b15e518e0cd990743a1d0d86ff6c17d5e9246022f5aff83372c44d0904a1abc7f7174ebd525944495717626274ed986cdc3c7ebd6ac6b379308061102b5bef7872c2000c52a0e02f9119c6096dee7abd7ea646492bd0fddc361743c0131bcf74c648d77a54a7a787b4b73fa9df3f15e37f2a7bbd1b7f0c13b08f9442150ae178195b1e297b78859175051ac2585b909a3807e5cd4e363d9174382dc78912f5bcebf8c627d52ff9b1aed5173a499a4e4a033c555fbc8cce93206525265cd76da02e771335c573c9edba528a421811afcf2d57e1f0677012ea630b2a09466ae44e623b9d666a195878d6d9fe746c60f0153e74852cf4122b82e024b2c8835646df3ea7eabb01b96438bb19285d888a99f258d67895588ca020eb8a6efed96f88227e29d1718bc97638dab4abbe759d675c95f7dd68573deee4f2ddc4ac248e8fe57846e6ebebf9a851eb1b8204f30e91eeff9a85b5f87eab3bae1e0c3998c8f95f7e5faf7279436f19425b647084cf3d8b631494236098231629ef3e158bc5605b143c350c6c64195014d79a9cb60c5cedd69d02a458683772d9aa00590f9fa5d179c137a31a8707e88b8b7585ca32fd607ddf023e9b0e9b9769b0d3a8f9767dbc94ac339a4d1161ae75648927f8466e8cbc0685476d42eb8f7b6d4049e030a2cf066add1427b7232ed0c846e4b85879dfa25fcdc4794bb30500818834a0b347f448653a47cc273de120b602f9d75c98f62a1c80c84b277e30812e5a03b717aeac5aaef7a307a664d6f61718361246208c50cda35325d98938f1b84e92ad44309d957db174b3754cb608b8b37d68404123cda1cfcffe9447a42d45fbd0487cef534d4118929f98f2e558bba50b95b09ee273de72a5227186d1ed9f64691220873492b1c1f67ca4e17a3d8c51a30314324c9792f99fd32fdd59d085e7b5f8a574dfbfe69965453887d89c9fb36e478a4d1477c01a638418533dffcf5b889189a7b3b9555966e64296404e996aa2e81f59fcd710595f095935122e09a69e32e9ce87e7ca3000bff2d45084863f98a570caead6fc282b5a65489756fe9fdff7ae1555c86887a2e462fd61ea17cbc1ceef0d4b209dc4f6d48aba6e4655dc5fd1450cc76d3d42564c151528930b70721556d6cbf43caf6f132a80d7e210105ea1069492c7ee240d7c8e526002e02cbaf3ad696f022a9aa586eef82ceabb7136c3bf1f8fcba85cd18952dcf2bd4593846ad27f3839b5d6611f4fb9de7fb7aa7e6b2dd31d0c55400e6e98ba5196994dd9f6898d2d3c701a29246b99d458023886218309ba937e7ed5997b81b875628aeac49a84646a359c91d3f07435e6a8c94c3740e9cb64174293a6e331a599644fe057df151ad84d78b9ff0968b03f7caee678587a7e291c2cc5b322a949e9c8a66c9a9fc7a514ea6e9878f765adfa84ef4f284b4244bc1e9f42a2524dd422dc846a02f51e9334daa712b1700a5712bdc0c5484c9b91e76438120836292fc2df8dd4a64fd1b8ddf274bf9927948095e35550a2c825ed36d150c716364951a03904d8b71ad636e285a29d492f8352e19b14dd6e4b91a1c44c7266ccc4c028e2edb558936cb5499c5c70980907935e2117594a9c098ec9e72158de177416bfe587edbcc49baa33dabfa875d7f7d1ac09e52bfb2e3717229aede4cdae7111a28d0b7fa0c662b6c75c534e6d79d11faefe7132c367a3fdc1b582c83c2ac6d5cce19ba45f0cc6236da9e6cc65052dc51f44fddd6210ef13a7ccaa33f56ed073a63c912fb20aaa95021112abffe5807c89cfd17eaf020f6f778bae5fb3d100c0023dadf326d9755fba14c672135b05804d937e6525f3bab8c7e88e318d6547c048f08d50a8d4a23972b240b3316b3d585739796db0be64c7b9831e0334a27d781916d57bfad17db30cd95efcab2c6edda0504018fc76cc70aeaf7a28870046817d6abd5ce3bc6b96c24f993356e17723168ebf3d869da0342276eea2bcbd1e30366991897ea172d5830686906bf8985c08d005d69ec3592e6211febd14f43a57d48c36902f988796295d25837bbca6adfc5e0e42335fe5e2727fb934c7c046d3dcf481f59d95d6ec27878bf3d77be4a545749c0a1f7cefe33fb2f9e53afdcf8f5bb892d7d3eb9e0c4017e6d3685108b4dba875175145045528708fe8457b6738e1ec4abc43399673d9bd283023a44536b6aaf6fa2a67b340c3d1575a19068cbb19b1d35ebcf508c5811561483086cdf80fc59f63d8f14f20528edf1676641477321fefe5f8408609dca3e1a67c3c081b72adf614a44623c26f1b68a1aefd6a33007ce4aa1be1855fa579468ce9f70aada42b3b72a520580d8e2677ab3b9d1aa6f5e60c93d3d66f690214fb9e3be441aec619cef23c46d7500c54574da6a241f9fc31d4de8db9998010f7b49c0644878d397fa1140e7b2a296a75df9c50307cdf80ea1356e5a0152f8ecee0513ddf53a504f44ddc91a714a0e017e80258ceab2713cdef5b6fcd22cf7b9930e48df60b02c0972e0cb471d972ab41d71815ddb3fbcbb18bbefd52169b1627632f0e13f72768295c75546afa8a1228425f55f6f09b10eaaaadcc6f46cbabf0079f357f9c08a0923b5956b7110a643490e5516e73864131753acf0bf6d0ae37139e8ef807b00d958af395777d0c1a5910a12cfe2995edd7259d8bfca48db7d68ee20a9dd6aa5d3833aac3e221c7539e218bd4574769cabfded9a91678e561e06f43cd52489e28ec10282030a96c6ab5ab85b9c3a9f9d4295b51026a158fe25a3c4ad1554a2a383b9c5cd6014003800fe88000000000000000000000000010114009300ff01000000000000000000000000000108005500e00000020000d328671a4df9e2b844285134473ed9c3dea41734b93919c6a22b10e8d0a931fea92019eae841232253faaa5fcd58fa4fd94479a7901138aaab1efda92f2583d0"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r6, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r7, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r7, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept4$inet6(r7, 0x0, &(0x7f0000000040), 0x80000) shutdown(r7, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r10, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000900)={0x0, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d00)={0x4, 0x3, {0xfffffffffffffffb, @usage=0x3, 0x0, 0x2, 0x1, 0x7fff, 0x4, 0xffffffffffffffff, 0x81, @usage=0x4, 0x8000, 0xffffffff, [0x4, 0xffffffff7fffffff, 0x6363eacb, 0x6, 0x8, 0x8]}, {0x8, @struct={0x1, 0xfff}, r10, 0x8, 0x10000, 0x5, 0x3, 0x7, 0x804, @struct={0x7, 0x9}, 0x1ff, 0xfffff000, [0xffff, 0x7aea, 0x3f, 0x10001, 0x9, 0x100]}, {0x34d, @struct={0xd8, 0x1000}, r11, 0x7fffffffffffffff, 0x4, 0x9, 0x2, 0x800, 0x41, @struct={0x1c, 0x3}, 0x4b, 0x3, [0x80000001, 0x24368d82, 0x2, 0x9, 0xfffffffffffffc00, 0x1ff]}, {0x4, 0x8, 0x2}}) 15:03:39 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x3f, 0x8, 0xb, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x9, 0x1ff}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1fb3ce6f0a04e3aaa1599edc649e1bacd8284fd5fe0efb1d10c909237f85f710457bbd3676023236e449b34818092bb1fefb3ef7348180025dc347f7c358d1842226d436787e3de4ca29c664d133c74125fbb18225c171178a625bdac3c487", 0x5f, 0x800, &(0x7f0000000140)={0xa, 0x4e24, 0x95a, @local, 0x200}, 0x1c) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x4, 0x5, 0x5, 0x0, 0x5, 0x20000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xdaad, 0x1}, 0x18c0, 0x8, 0x100, 0x5, 0x8, 0x4, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r4, 0xa) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000000001f40700020005000000"], 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x20000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x404, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6d4f80544b8b3c79}, 0x40) 15:03:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, 0xe8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0, 0x0, 0x0, 0x9}}) r9 = accept4$inet6(r7, 0x0, &(0x7f0000000e80), 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xd0}, {&(0x7f0000004880)=ANY=[@ANYBLOB='\b\x00E\x00', @ANYRES32, @ANYBLOB="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"], 0x31ec}], 0x2, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYBLOB="1400000000000000010000000100", @ANYRES32=r6, @ANYBLOB="000000001800000000000000010000000100a0d2798e2c906aeccc72ebe104b128cd4a0052b8e90cdac20a58a3df5329500dd02a0ad05b9434ae606ec292013c263d22453c447889bbeae5187e829d749c658ed6e174d9a67d0fd6d97b9b87f11f3c020000", @ANYRES32=r7, @ANYRES32], 0x90}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r7, 0x0, 0x0, 0x2200c811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept4$inet6(r7, 0x0, &(0x7f0000000040), 0x80000) shutdown(r7, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000640)={r10, 0x9, 0x0, [0x10001, 0x77a6, 0x0, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x100000000, 0x1f, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x0, 0xaad, 0x0, 0x0, 0x4, 0xe5, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0x6, 0x5, 0x0, 0x800, 0x0, 0x0, 0x6, 0x9, 0x3, 0x80000000, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000100)={0x10, 0x1, {0x7, @usage=0x4, r10, 0x3, 0xfffffffffffffffb, 0xffff, 0xf7cd, 0x8, 0x10, @struct={0x3, 0x94ff}, 0x3f, 0xfff, [0x0, 0x8, 0x44b2, 0xfffffffffffff800, 0x7d6]}, {0x10a000000, @usage=0x401, 0x0, 0x0, 0x8e, 0xc13, 0x0, 0xa4f6, 0x5d1, @usage=0x7, 0x99e, 0x4, [0x9, 0x6, 0xffffffff80000000, 0xfa8, 0x400, 0x8]}, {0x3, @usage=0x7, 0x0, 0x7, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0x80, @struct={0x0, 0xb2}, 0x6, 0x800, [0x0, 0xe562, 0xffffffffffffff33, 0x6, 0x3, 0x7f]}, {0x8001, 0x7fffffffffffffff, 0x7}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000900)={0x0, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d00)={0x4, 0x3, {0xfffffffffffffffb, @usage=0x3, 0x0, 0x2, 0x1, 0x7fff, 0x4, 0xffffffffffffffff, 0x81, @usage=0x4, 0x8000, 0xffffffff, [0x4, 0xffffffff7fffffff, 0x6363eacb, 0x6, 0x8, 0x8]}, {0x8, @struct={0x1, 0xfff}, r10, 0x8, 0x10000, 0x5, 0x3, 0x7, 0x804, @struct={0x7, 0x9}, 0x1ff, 0xfffff000, [0xffff, 0x7aea, 0x3f, 0x10001, 0x9, 0x100]}, {0x34d, @struct={0xd8, 0x1000}, r11, 0x7fffffffffffffff, 0x4, 0x9, 0x2, 0x800, 0x41, @struct={0x1c, 0x3}, 0x4b, 0x3, [0x80000001, 0x24368d82, 0x2, 0x9, 0xfffffffffffffc00, 0x1ff]}, {0x4, 0x8, 0x2}}) 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000000001f40700020005000000"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x404, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6d4f80544b8b3c79}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000000001f40700020005000000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x404, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6d4f80544b8b3c79}, 0x40) (async) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x10001) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000080)) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) [ 2570.601746] syz-executor.0 (19542): drop_caches: 2 [ 2570.616709] syz-executor.0 (19542): drop_caches: 2 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) pwritev2(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)="6f7fdd36dff2a8d4bca916e2fbfb9097f778276d0a54b1144bcc9fa62c69379a73cc1ef722c0a30be9eaf6d11336ae4807fac59f0b7f40ca4069dd8ea32136d1633db67cc54eb8eecb4ac93f098af5b09d1b8d9c9eb0b7d8f9d0d4cc34df304a4d4970b128c512e95885deee1f1a285dfed362f4edc4e3947770d3ef877caefb4477d6b4b98182f4db9d24a94b3ac2dea32047f6e41f86b42636880fe195e27b527f62ff7da67de996a9366d9d108b5ab702a3e63810f8ca9e3a07bb7ed08b236bb07d2ed6302157af22bc56307a819d8e163598054221f350603f0252568384f66f376edc3f6eda6e10891559a529cf2a737f", 0xf3}, {&(0x7f0000000480)="6e31e2ad589c2c26382df9059dd9a6ab9954fb12c89f97c41e2432644b4862bc16333e7e94db68cadf675ed0ffc7dfa72b1747b0de92c1b6763dd0d57287594aff01700d331f898fee2ea4933b32469ccb91691e153ea6bc40ead6dcaf39ed52f38265248ccc1fa1ce719f90b95a3b5be851534e0cf0d54291147a00764723790c668c3d9e3f0b91486e49f6c2496e6e85237da26dfd61348efda0018801a928a7aa5b5144b49eea2f430c583cff36608d70c8a4ded27bc18ab445ef6bc7e04f9860af534973d2afa924dcfbb9378cbc83fd68042dc5e438a8a8a03d04f9f20548759b02cf519056a76d3432cfebb56ab7e4f03aafba15158a8fbccb28e5589c73a40c073a64e13cbd2c286dfbf2eb2b8d998ba3b16af5b7e7a04f51128941bc2f449c44588baf9d6419e123c2ca7ddcd6b755fd8cf28547448f058d6dbca9414d3f065c6a27c4c36ccd00bd964f2487b9231b7820e505f6bcba53ad7a28ad1ed8a836145a2c7ab4b0af69b4138e2b9627b02b7b0687c8b038c5eac6fdc3afed6f331df3f5395a0cdd05e098f79907c685f650820eb175b9d950680f96cdc9af38c68c5b30111f9806f23b567d4d4f611673f424914e3e939bcd5e99f5dbb0ed3986419d7113b2ab0bd8feb6a1938df338f1e68d41698efa0da7f83fefa7fc6f51fb6d3bf3b4429234ed2077f1be7b74fa2312bfac1b8b52344a8e7b29b40a3b1ede1b784a9150f890dd0f1fcba58cd686094e4275d8756c96752fcc543303e4f52cd3935e2f3b80da5250cd80e8ba6214de66589a8905313af32f16bbc80d9fcf261794ffdf4908cc3bff3dfc49fc181bbb4f9072c4cded9396417f5f812192b99cd174154c0c3e24b5c0f08720d44673d4baffb3f1f198d8e214b5fc764a41c9652fc0576f52a7179796e98edc6adb04b7e4fb86b6f0d049addb531f51e407c7f60384a2984063e87ee4a341dc6a9441a2e4a299d7cd5f82dccfea8f6ba043e47b9780f1b0ef0d053a5d17f43036983e8dd54d8d465644c086d875fdc40d9959c52e84cd4cfad669569dba885e158193cf9ddb3955e9d090d4eea8789ae6221f557556744b05bb9640a3cb7a5f1598ace782f94bc653daacd6cc7be6abf52536355c98b647871e917370e804e0f087e15e3001584368e3297b9054c672ee02d7afe136aa2adfac9f6f25ff017032c484bf61c74f14f4d3988906272355e670bd27c28af453008b1abb043c714badaf2b453f82de0a04f4de7406d27ac8dd038a0f19138b638f56b2b905d6807a5220f81f62bcb3dcb796371d2503a6381eb71b0a134e224a7a5c9e496b71a244d99e2be36e246aa88ffc1e3b2c5ecbeefb433c78b63ece138b7d0eec91e279bb01c7f410f79e08b96028d3ef005bdba31da6cc5b80cb86e752334aa11ed00e058b938faa483d364306d426d1663488510d4e48202aceec58eeefc3cc2b6cf6c8fcfd95147a06a4b2dea089f5da98a72a4d4e1fed84f40dfd725eb2aa8c6d0f739f2d161dc39e01444294c689b26090005042824f9a24b59ad69dd04af2811241e7e926e96f8e52367d14f72eea4fb30bac51a29f38ac589f0c85b1a8a8d1cdaf2b6c790b6a38636abf970049875970742fa2dbffd89db2198ade472e4186bb342af2e1f168b39c9195c949e2cfc19e8d1a214710b4629cfce584d2365b224da35039736a9b8513f0370df3dfc9cbf3c3d6923afc57847176e6b4b2de2cb37fa0356e17f6776a30c0ac645f23a28e58c4fcca2d24d04e0e5b6078c069d98f37467e215db156078276b89ce125f43e21f30c528a932eead576a6ef530a75a710f2e54ef02dc2c3a6bab771cb92b7bad7960ce1792c956bb794c0e3dae70dcec9ddc38cdbf43a113a644232e48b1f89321d0df9f345a290ebfc1babeb63443bbea582e4111f2ad37a9e6b6671bff36b1cf964063f9c40e3d957f214559bfa65afc8a3583825998372ab79b95b7d238f7dc2d462a2d6a3217fea88510a70328c3a61fc11010b0031e11bfdb459d78208f9aa3702a1c32813de7c3e35396fe1d031d1529ee1a8d7037791cf7e0dd85e7e7734130e6136f590d8137b52c9f81c3b16a17302d7797f368e756ac428b8b1a67c5da3c07e310a03cebf165e1d65f92208abe5f5ea90e0842bc5f29796e66d7fc756fe992c71007951fdd357e64c979682fb913736f8b798926573c52a7f6941960c3622c6a76c91d73237c65e5d743176d95e01f171cb9d2418bd93d3db42e871e68490e85cc0c0f98d978cd3035b2e8ebdb09da33b82d8d3f1d0417d5198cc8ccbf4ca043bee172b688e2e339c2ce93419f7f91bb9a2e596b7f87c092f33a18ffc17c245bd19a681e40a2c63e8eb32031df0eb7f6574a565c27f4edabdd1c28c8aa37e609b30b6cbb7b8cefe4c599549e0935dec11517a495c90366323be94dcde22f53d195430a284178026b6aa2b2ea3a18d19cc6e58fa98aa7b9b51518daf46434e01b01731501953b2f26a3f6ddba74f85b1e6e5a79463896040ed2698af23cc2c059ef27d801149c4cef108ba22188f7104c8f7136a890bc637af178b5a598dcb348e7d290f781925a45733e8e1cb7b4e193e119c52839697e900ebcdf572a38c25c2c0d9f985917efdac6b7a2ff008e2413f644337b22a79b1c7427d219b103a30d225584e7ae0244cf2f9a9bf721ae4f8c7ff95d1e2da5ac0ea57048041fa7025b0255a7a569bd36417fefc7f5389f3b780cf540bc316efb783721d4f1016e33021f560a1806d6ab21ef88f680e6fb49e8a6eaa55361e2a8df1b8758faee7d3fa2cf52ad23c71e6d15e886d5d80365a1ad79dc7dc1c3d73fe4a4528ee02054363bdeded4383eab5eccedd8beeac57455a01e2f84d4ecdad897572391813a9f048daf9c323d299c2cf22bd586901c1aed4dda16a0e508f579d2c6f7fee3626f1a7fa58d026e5dbd4bf53ea2e2ccd5b6545b3c50b9e7a3c41de56fdaf45848cf97f2341df5b69e2b4fde323f478da688d1c0646eb9eeb1d27646a2c32d02d8a355441b8b5400a0911c5485ec578b3d34633e86bb7bec2400ba4b6338fb5f594e18b6459d6c809a838b7341ccddddf42ece1f14e4a7238ea6eafa60070e303e371507841c8e1a250eaf312b201db00aeba1fb3f9c95272c2eabc4beb855b5cd973f08da19912e36452c7b9dbed8e86a7028c9c118ce2cbb87b1605ff186a75437c18347e1eabe748a15bea7c4845deed84a8d86253b0c2d2c472bd916a16912ab8e08ab7adb0061ccbfae20bbc1aac71950299554320b408fce58eb79a368cf6fec7290e44ee26d0b60d47589e228fc340bd15525269d161772610e19a75701c5c165de51625f22c2fac1ec4d957950a3de064cad643e5c923a1237cd31745066e2c0f83c6fde8afec186c244e4a609e8ffd4b54233f4bd140c1ddd3b81e057f07d5b0127b30d7e8e562d79f145b3044ae1f9d00ab5a5fa09139a2021140806b67aea1ca47cf03b6e71a1a212f60ece625b0b4bb787a0c1b01b1368fd39ceb3bde8d440b484333970fddb5f4aaf87641d13bef22737cec3d253d1fbd5c2e89f6cdb3b1f78ce27d9e1c9214027e6cf368fbfce78889e2c2d6ff25cd07cc595cc21ea59e3804d31d2d85e36b4df9798546c8424f340ce4ce31aabdb2589a6a017f6bc2f7c4277f919bda5b6efb141b6de711d564f0ea602b99cf00537046a027d327fdab0396d653874e46049ccf46cdb5775ef8563264f29fb5a51e57dcec00855218da28eea8dca799455f7be6d5d8f3db4bcd7992168d404c1988ec138471524689551b7b081b209094ac0bff867a6bc4bb9abcb0f56c19c63b6087e599e72ac3d1617d5c143d139d755c977aeba80e876ef58d6832ed2b1a51464cf25ceb213a66696afb83831de14a10fb078670326fc7f8fcca0a843e3bc51045aaa08d57cd3694c6ea7c2425f45959ed9a3b7075d8be01fb6ac4ccec4dc39285e6825064b8733daf6a2b32acca12d7cee3cd0716e1d19f678a769608e9d0cff0a85652f93655e4e847ef4921f864989fe62111040c08d483a7f2370cb1df5a8765895ee9ff4553829cd1a9ccf4b97d9cb5258eac7bff5ffeb458a818fa0bd76eb3617185950116a6063981be9998b1da71885e9688ec6d1d49a2b1d98d27fcfab272cbd7ba05591267b8e7434e9471260ea348b1105cdca8854c6a9246a175478170a3d78221a1b0e1a2219cc5e4ff3ade7aa3250a289c37c041dd60b4c1f12faebff2173b97f2bb8b51e2da448776959753fa7a1f86bb8caa4754c4debe1ec81a0d0578071fd9732ca1f269a1126425a1dbe43b776a3740214a1db65e965b6a2d1ba6d8247a8849cb6d7ab40667e5c2e6d26975146d2fb62a7747345e00a2aa6bce09e6a326dde7abbd0da5e69fc47ae91e98243526775764342d6e5e1822f4ce7017dfb7bdff60662491549fc6e2d9f458f25ae5e6cedd655fa8a9f1c2c14af611e7ac52193864d2d1852dfc6559d1e738a739c8e436228ad56a2b7b4cf04c457308c9587fb1959dda3e8c34fc2210151f59ddad1ff644729351b743a104b8c736766faebb5f727ed8d3b8d84a3e458d4e251a367a77d315d342d642e33cdc27dffff63de5508ae09ce977a5143dd70587b3ce62091084d218912ef3cd73891a08a5400375a23695c567e5588aca1e4f9579ca33a2dc8a6899bbb9a4029a49bf8905a80cd8e793545e5dba2bbb2dd656d62a2e461907f17bb99995054db4d81ed1f4a3dc7dd72a39ae94297f6efcaa31db0178ae9c22a7f22ffc496af7e46f1a7676655acaec62d3895921c8b705bd2f3ee6f09db9b969243311de17324bc85c44bdabcd23963908980b72bbc990a417fd28c97ef181c3db68da6ffdcb5601283a32de8eadcd7d12d4f6638f14ecd76d567714d12c035888d4e7ef6c8f84889a7408592301a292151b5f4670c13ebade56e2f26e0eba14ca26f0cec4b0b8f1a7ffd4bb1c4c207e0d9692dc6ef3bead65857587e3ab02992d9276769ea10eef4ad15e6dd3bc1b783dba5be0c265f3822d62bab59cdf1d2783ff58ad87ced14b8ef26cfbecd452bd2d8a36809ea43c78c363ae10d1a90fa8d532be127c1cebdc9648ed66c538d593425e93dd1c7be34b2b194c132a970a82728e7272e89d3716b83754099788104f48e5989e5bce1c864affb1edd0910a0dadf03fb8b8242133d8d6170a6a250285d79fe71745fdf4329ac5b9d118fdd9c1b050cc6a735d73fc7320e4cbef5bd92c81e80dc00ec2453f20c05f6704060532b13f43547bb109ba4785352fd1d08d6a7d192987b64e6878e18cceee40f1de07f1bdc45108320b34ccc503350ca7728ce55054ec331d82a02a4f389d9f526fab5377c10e285e3f03206d4ece0794409f746b1eaa73c1b2230fa3ae0c8dca008e0b8f719f81c71dbbb8a3d16871fc519bff57b831f7c6135f9ab30da37664a868916f617864da806358c359ecf52234ef45bfa96326b9f4f0634917506fd6bda7abd48c86aa9005fd54d15a5088cccd9f47d973cbfdb2bb87ab310287ab731279e8039e3da0f617dc0f50a8bdc5b8255e6b0aab6b73e6fa770903055d2372177e3e7034ec65fad513038e69964ff028126f44794bd96f07a5d7759892681202cb5c7e3277b7f33160b59626b932f069d8bb0b610b0b806f39f92d75d3e98b3ab19d8ef841ba0216c4bc9e379c11d62be79ffd30801b99d62331f48f81268d6b4df4c0bf52b88a1faada5d2dc74a6dcf82804adb51221536ac5a98811ffb0bedc9745c5b8a39f74a4d9718fdd10d", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000002c0)="16a5a46cbd74d7702773b6c420b0d5b2efbf020498e563075411352f06539f875e77edd923f695eb4b041a8dc920fdc7bef9bcac6bbb1c996df4a1bf726a8d224df8b4455810173ea450fd1ef72b583c577040f70e940606f94a96064ddf1885c1c9f50cb01fa9c39a54f25fe55187bcf6537e77740379", 0x77}, {&(0x7f0000000340)="e4", 0x1}], 0x5, 0x7, 0x6, 0x8) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cf15e7e35791aa022be0e5d0300f946c210", @ANYRES8=r2, @ANYRESHEX=r1], 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000001480)="660f3a15a1b344000071b9050400000f320fc7bcd10f000000650f18a300180000f30fa7d0ea000000003301b9800000c00f3235000100000f3066bad104ec66baf80cb8aa262e8cef66bafc0c66b8ae4566efb8b21900000f23d00f21f835100000030f23f8", 0x66}], 0x1, 0x0, &(0x7f0000001500), 0x0) 15:03:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) 15:03:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r12}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:40 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x3f, 0x8, 0xb, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x9, 0x1ff}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000440)) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1fb3ce6f0a04e3aaa1599edc649e1bacd8284fd5fe0efb1d10c909237f85f710457bbd3676023236e449b34818092bb1fefb3ef7348180025dc347f7c358d1842226d436787e3de4ca29c664d133c74125fbb18225c171178a625bdac3c487", 0x5f, 0x800, &(0x7f0000000140)={0xa, 0x4e24, 0x95a, @local, 0x200}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000000c0)="1fb3ce6f0a04e3aaa1599edc649e1bacd8284fd5fe0efb1d10c909237f85f710457bbd3676023236e449b34818092bb1fefb3ef7348180025dc347f7c358d1842226d436787e3de4ca29c664d133c74125fbb18225c171178a625bdac3c487", 0x5f, 0x800, &(0x7f0000000140)={0xa, 0x4e24, 0x95a, @local, 0x200}, 0x1c) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x4, 0x5, 0x5, 0x0, 0x5, 0x20000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xdaad, 0x1}, 0x18c0, 0x8, 0x100, 0x5, 0x8, 0x4, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r4, 0xa) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x10001) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000080)) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) pwritev2(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)="6f7fdd36dff2a8d4bca916e2fbfb9097f778276d0a54b1144bcc9fa62c69379a73cc1ef722c0a30be9eaf6d11336ae4807fac59f0b7f40ca4069dd8ea32136d1633db67cc54eb8eecb4ac93f098af5b09d1b8d9c9eb0b7d8f9d0d4cc34df304a4d4970b128c512e95885deee1f1a285dfed362f4edc4e3947770d3ef877caefb4477d6b4b98182f4db9d24a94b3ac2dea32047f6e41f86b42636880fe195e27b527f62ff7da67de996a9366d9d108b5ab702a3e63810f8ca9e3a07bb7ed08b236bb07d2ed6302157af22bc56307a819d8e163598054221f350603f0252568384f66f376edc3f6eda6e10891559a529cf2a737f", 0xf3}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001600)="a96bd5e261c081fb129b9640762b101cc2f0257ce1b0b7bb5e6f6e29ef97e2b6fe234bcf6b2387e5e9ce4b3c98f8bc6182bb36480535a93ec1c2b7eb0d8a4efa6207b44feb9e12325f0e87f72fa6f3519f9f86fb99cefe4a7a182dee5cfe313f031f843ce1dd6edb3fbe607967d560fb912a1d28885ec290c0f769ca96f80559dcd14e51684845002c50a2932d5a729aa0e2b762e91186bfdd2b7e301b78614bb0f41c8d46d4797c5f6684f64b3cfe16c9fbc319302cb3470f1037e0f9ec10115085a63e3eae34b08a76705099ea97db386c68a3de8e954a4416c07eddffbaed360181ce15fdca406a39c531ce4f9f81c2c39e56032bcf7d3190c852f089756ae29de412d8a26f2bda65063dc3ec364fd46ebdde146cf44dc116d0a2e8e9b7f66d16dd599a6350e20a970c0e7b5e43362ec031742eab26a853379c53d1d89831cda066a90ab859b8e26fce44b50e18598ad3a73616095acbd63177f8f48142f2a857d07ec1ad2e99fd87bba3520566c2af6497e8166241c69e98ab569b9bc5a6ba3b8e44e17c4e26dad748d9a153a0b12e6958f9e16d469ad286a02a5ffbf9b97314adb414a59831f1dfb329a42ef14a4f4f31bd835eb188cc082449af719b6a21756636002ba4bd4b146e5b52106b4e8285720b3813c2383ff40cbf40c1fd0720b2b84112e6346dbfdda92891dfcb166b687939c1465d7fd691f3f72237285b8d23cfaad67265c9aba763b1de2a3a13f8dade9e14ee672cc912011814eed3d64c04eed877eb9026425197f7305337acb72c6995e3b90d2b3f375e567b4be1c3800912548a64578140d457985ebea10c8d292ba0a05405f1d0df41dc731224c2c55fb508f697056d666c71ee24049e04e3ced4b22e78688c086cb0ab3b34bc64e6fb34030c9e482a94e9d5434e58fc4761f08393798bba0fe891c25563f04e02b8e2b84398f3a0a5a9597ed0d1524c9859f90f478313ef124a1ecd1027d56ef469d38b139af239f0472c818b1e106d2c943e9eee94c2bb64b4b5df045358694820d1d6da547d14ef88e1873a19b35b9dead714a15298a611983e0ec4a1f32b7c0a88f6bf0e3ac2bde65a883f33204ef256503dffd78aba74d9e3875c9dee3c8b989f181c4d499ff1a339629b02abc90c42b5a8cd670c36d43c03d075f7ea416dad38fa7e93adf9786505682ca51bcda3871f5f158059e2891108274721d42884aa723b03421080df56d71d04c8aa62f930823eca75eae5c783370f59d7dcfb0b1bc0276e157f5b7223147b2c0a7e6aea24186f63ae32469b61313ca71ce689cae7c79a8e4cd3439d7fb6d578637c4ad8d65f18ce4df2be76d6205272521345f5ef2977d0f4b1aded9906c21f168d981d5901bca275dbb9d889f2831d26e4b6286722837f6be3e9953cfd8e8158f30997b178cab7479a18e675290ce735136cceb2978c2946eaca97f14c67b3f3923e7acb3c457a1dbfc38fc50ba437b0ce8a7068bd873d2a7c470689473eda6c093cbf100aaa51300f81dee6b0f9a25c00b3eabefaf6bbb39b79f5b2e52b6154c200acd62771bcc5f02dd00a59fc8a64ce765ac656ca3688e5228d3074ba05725ce7215f891050f2a93d49f158ef31f29c80affe1f5ab5b5051028181b2f3fad0e88b23884550b2823ab9ba9826bf778eb42ebf3366cfac806b3876fb9ca9b65bef317f413673ae251c4147dc092488b883e0f388c680f66525f25e3480e7677f01728c3c4dba6495d3eb5594ab1fe54d2f27e188d04c841be054ec15f36d276232b1719ebb6fd0b26f2d126ff52f271a6f6c27a6abc62aae840c13ff4f9dd3a82abc6c7c1df103c35fd15b6be5d8f886187a74e574fe06d57af0bbc4796c3471efb1faf06ac1c00e6e0fcbc694b9132d6515d90e6e5ffcf44fe0abf6deb1355b79e9dc1d29b495359ad1233c0aacc54803f0b35cce67ff687ae142b929830abb3c0cdab0455a1c0425afc71b8d058f3afe780c078a55d99919be08354f4f2ddbca8c364a6ecc1c2ebda4d2be8902629ee7c36eb3303e8b9229c10a012af1112458ec90b524ced54aa90c5909600ec6f8e429d892f16aa4b62311beb9ac45bf2ed826f917656ddf94c19e25df2a2e65272fc33e8eb32f125a5d062cad476bc7cbfbc179688f0b3fb88596780fe0652b9ffee13dfb37a02d04fc37288fc77b66ebb7fcc2293380955695e17e191664bf080779bef3f92d4c1e922961c79de731d217ee1a90afac5bb262f38fe3f65bda7fd466342328617ffe97c1df94aeba3853c6e03d55b9e2c99e72a7433cc552026c28550354efbe2341ef09e5f9b739d5f92fa0a477b47043eba17741fd0c949ff3623288a3241801d0849e443af923d61306ef88b6bc9d66c1b7081917df750f290a666be5b619f5d3ce18d335649e5e92a9b525d5defc8d9e6f2a6699d9d13df89a0551fd588d4d37638c1394b9c734857b0a2269980095488ac2373dbcbb7f7739c808fec2c0ce30a7431fd8c324ff4db2534b83ef65b15d0407ae436cceea7bfabaf4e0382b9baaf0fc9204b996c10ac16e22647ed5c54946340321b44023fadcab7588aa29f5bb58e425ff007dd3c08a93b60cbe6db31009f7ce1ce7733460fa0976eaed33b83c175f1973411dbe1d3155f4ff92f913ef2baa31c4c3d5c4a7bfee86d92be4915daa869682da990a3d2884d11155e38173134a75dbc2afcfee73a4862975bb45ceec5d3bcb6931067fa55d22e374e4166fe05054e8f40c513b38dfede706b981a6b2630ef7c914d07902e68395aa4b5f90b4f154dde239e652835d01f44dde65087fb1e3901cd48c7a0564b59757649172d73a9790aa38f2230d8711bccf7199aef68307768cda974a03601267cadeef8bd589f198eb25c3e71111167bb26af7db2e1e08c9347de343588b6029af1d6634a74a060213709fb534a9f123df138bf85af4fdaf77637f0c11c5c2eae679ceb7598eb3501d65a50383b912692bd0c8001626a51578af4f2032637205f62cec3dc29f6ef9e87cbdbcfe7f412c9fcffe00164429f9403ac17c947207ca69b13b273f18aface799a101b6e788da3e920213ac850203c30471e7dc8e4535c5c17db8b27c31221743b0ead5d9804b44f4d2ae31bfe503933c60181b663597d9d058044df5afc459db70f8de064b6343cd8d4e9aaaeb0c17b83315f337d4b66491ca067fc1bef024bcc7feac9e17e9af594516112b6580c4705c0902863dde4a264350b71f9ae6eb8c03a1a06f45c881c0b2bda4a8bf663739c86d9c36f6e5683009670584a7d2aa72767d48ba88b8b6fc44d9c0baeebfc948060abf67139924645c16ca9232aa6ae6eaa8d42ac485abb4aa760a796786751cb35756df4d01dedd2dcc17c46a01d4631b39db2743aa3181c7ed3a64a41890a9877f1b10d3c002650934442975de4974359e2819fab1e46f7c941b6517a02acb5a2b957ce44737f1b20c0b7a91e986f7657be1537922697dfd9507cbef824fd550f230cad9134468d40e586384b8e967d41006a24f517c6b2df28ae4887a6d5408a98dbf279156c540a0891076bdbbe7a6b6ca89514a71ba50a663ab8d18213b2c6d5bdf719ccdc5c925666614699d15bb84e8f07d3487dbdcf5b3b61763fbbc05068833f4e013d15167aef986a1a02d8c4bca9e3b44b3dd387928e914c4b736fc7be1fe41d01d487f2c14685b88f8cb7b0381d113d30ace135299d208bf84f230ee18e6828f649b30800ffc1242ac38f3c4787d5aff6cc6a84bea108dae7fb7a673c54b50f2b7a7c66f273066b789305ecc291c34b2d39e6d643941d8ed41b8705763eaf4e13bb316d622deb53505cfceede4b7d61017f001d822b0801a88c627a7ef53696f5f55abc02466c5c7fefd824f6181f768e34268fa42825cc4f3aae478921e6ca912b7926d0b3a9170040e65cf911699662358e8ed258b1449c23ddf83350fbf171bef631312a4dda45be2260246dc2ac681a073fae55b79b7960d3dc6eb1e884714dfd02afb638a713f7cb4e31cc39748bda12ffc029a05ae59e3438f73af549fd67dd3a84ad7d949717f259909f9d7f139626e805779f9100944c47d99cfaf6e094e1eca7234c8e43b88a3d15d6ebf14401748d538cf62597c64a6900b6f52b32f663dbdd091f33820f634ff2e4df407ff0c81972a15f0300f9f3b1e233ca559173fa527f66bfc33d42c6154722870a095e639114f8a553a41b92725bd21b9a4fd45cc199c9cb2647d940002df330d9af11732d624c88f6671767cad503541f9cdec86ad13b860964929390c929cc051088f5badc222dabc3b6e29fb3c756dd157d554f457b7749b4137b9b0e6be32289509747aef02371d79bce466dd1fff6f2f55aecc5e7a14531f7a2d34793a7004b232d26b0f73dde7c5482642924454fe0dfe41a90c8947c196009a0e18d4f9c64a37144753c7e00a74adec71788b86a5b70297d4f66bd39635b4d9ad7e17043739e643d27099a8b4a0309f2c15425ec2e5918ee7debf61027708b0612e36a4168067ef5696f556aa6f1d7216ed602e11506e2895ff75aef8fb7a92ccef471fa0272a824f0a0f1b7136051a7a4af4a7d53bc666391d51dd0173458d9f930811167b9591b63a2a3b322c2407c54e2035c532b7866a169b800896c03295b994e825882b50bfeeeca5a25ec970acf7977dfc142f557e8c8757e08bfa4c0ea3029585d159bd87a4e7d1fd6178df9914402d817e30d9a8e1a4ca261b0bfc45e8c488d2b1984ff15ebb4f07fdf3f2bf42d5d382cc44afed9590e3e1e62b07b7593baa8846f6eb673420d309ff6593df1dc7fc05b5bd4a36fc216c4bfcaaa0335d935218463afd8d3060137993638bc4cc066e19170a013f360b0ad8315523bbffbc9b0c64058d9171d46dbae5ba98341082d67a8464102a2e704ed82984b68c10c5616773beee700ff895b84dbff83c9c9ea528fe35f50483c2f35709d9e667e8fa08f7ec74abaef87fab597619d588fef5cb408ca94372482d526c2851133613422824c1b45eb07016cb8f97d1ee65d26efe0f553d53571beb2089deb01de2c5683803e24d40a508e1c1a9a9b32009205cb782db9d634a14574c5f91617baecc11db1ea8a116fe71611b3bac97b95c8b3abe46cf383563b9bf5188313700854c1336ec1217e27200605d2f501026343cb70d026dabeb432ea8cc1431a9167a8d4fe0811f3a282939233ee608d1017d534d02716df5075bf754b322e3b0a7f4ff3c0b105be97500a313e2d0105797b5f054aaa90ab5be9a2ab995f3cb8fb8a1190a5910b1a8bb63f21e8ac37616062f07a76b286a0b93e4dbe38ecb6d176d664390d5df0f3218759e2c8793979905fbaa37ccfe897b6c7a5e59822252368b03cfa30c5bb87bffea77aed7b1799a78009631538882ea5a4e262f0fb70a3aaeddace21f1539e77c5d56375c568ee93a58e77d4d73da48765df6d5e334ef2742b311417323286d53ad644f897873a936c9cf01d71dd62f1b3d99f179a20bdf2d72f1736046721fe824406f61a041b1d3f82cca1f4b1b77967ef96850e919ac1ec946c24cde5c1b23803af0a62d8d11423abaaad16ec1e8e309de035959f1f516ea41dc2fb409bdf65617465cb126d67feadac2ced754fbd70aa19705c90b181ef0e1aaece19fe61ce2bafdc395595f5ed67905001eddfbefa7856e6a776e264953b259bfb1536798c444ff6d222ef8dc297cb1a9ece900614e7098f4b8f8bb5505a845443104170cde4ecc1477dcfa6a9b96962d90cfc8a62e6ab6770146202698d607a", 0x1000}, {&(0x7f00000002c0)="16a5a46cbd74d7702773b6c420b0d5b2efbf020498e563075411352f06539f875e77edd923f695eb4b041a8dc920fdc7bef9bcac6bbb1c996df4a1bf726a8d224df8b4455810173ea450fd1ef72b583c577040f70e940606f94a96064ddf1885c1c9f50cb01fa9c39a54f25fe55187bcf6537e77740379", 0x77}, {&(0x7f0000000340)="e4", 0x1}], 0x5, 0x7, 0x6, 0x8) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cf15e7e35791aa022be0e5d0300f946c210", @ANYRES8=r2, @ANYRESHEX=r1], 0x1c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000180)) (async) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000001480)="660f3a15a1b344000071b9050400000f320fc7bcd10f000000650f18a300180000f30fa7d0ea000000003301b9800000c00f3235000100000f3066bad104ec66baf80cb8aa262e8cef66bafc0c66b8ae4566efb8b21900000f23d00f21f835100000030f23f8", 0x66}], 0x1, 0x0, &(0x7f0000001500), 0x0) 15:03:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x10001) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x10001) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000080)) (async) 15:03:40 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001a40)={@my=0x0}) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x100000, 0x14, &(0x7f0000000040)=""/20}, {0x1000, 0x35, &(0x7f0000001a80)=""/53}, {0x0, 0x1000, &(0x7f00000004c0)=""/4096}, {0x6000, 0xb5, &(0x7f00000000c0)=""/181}, {0x2000, 0x37, &(0x7f0000000180)=""/55}, {0x107003, 0xc7, &(0x7f0000000340)=""/199}, {0x5000, 0x4b, &(0x7f0000001ac0)=""/75}, {0xd000, 0xe8, &(0x7f0000001600)=""/232}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001a00)={0x1, 0x0, &(0x7f0000001500)=""/176, &(0x7f0000001840)=""/244, &(0x7f0000001940)=""/101, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00@\x00\x00\x00\x00\x00']) 15:03:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) r3 = syz_usbip_server_init(0x3) r4 = socket$unix(0x1, 0x1, 0x0) dup3(r3, r4, 0x80000) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) pwritev2(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)="6f7fdd36dff2a8d4bca916e2fbfb9097f778276d0a54b1144bcc9fa62c69379a73cc1ef722c0a30be9eaf6d11336ae4807fac59f0b7f40ca4069dd8ea32136d1633db67cc54eb8eecb4ac93f098af5b09d1b8d9c9eb0b7d8f9d0d4cc34df304a4d4970b128c512e95885deee1f1a285dfed362f4edc4e3947770d3ef877caefb4477d6b4b98182f4db9d24a94b3ac2dea32047f6e41f86b42636880fe195e27b527f62ff7da67de996a9366d9d108b5ab702a3e63810f8ca9e3a07bb7ed08b236bb07d2ed6302157af22bc56307a819d8e163598054221f350603f0252568384f66f376edc3f6eda6e10891559a529cf2a737f", 0xf3}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000002c0)="16a5a46cbd74d7702773b6c420b0d5b2efbf020498e563075411352f06539f875e77edd923f695eb4b041a8dc920fdc7bef9bcac6bbb1c996df4a1bf726a8d224df8b4455810173ea450fd1ef72b583c577040f70e940606f94a96064ddf1885c1c9f50cb01fa9c39a54f25fe55187bcf6537e77740379", 0x77}, {&(0x7f0000000340)="e4", 0x1}], 0x5, 0x7, 0x6, 0x8) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cf15e7e35791aa022be0e5d0300f946c210", @ANYRES8=r2, @ANYRESHEX=r1], 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cf15e7e35791aa022be0e5d0300f946c210", @ANYRES8=r2, @ANYRESHEX=r1], 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000001480)="660f3a15a1b344000071b9050400000f320fc7bcd10f000000650f18a300180000f30fa7d0ea000000003301b9800000c00f3235000100000f3066bad104ec66baf80cb8aa262e8cef66bafc0c66b8ae4566efb8b21900000f23d00f21f835100000030f23f8", 0x66}], 0x1, 0x0, &(0x7f0000001500), 0x0) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/115, 0x1}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000340)=""/255, 0xff}], 0x4, 0x1f, 0x7ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000dd884f76234fbc7c0ea500000000"]) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/115, 0x1}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000340)=""/255, 0xff}], 0x4, 0x1f, 0x7ff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000dd884f76234fbc7c0ea500000000"]) [ 2570.902527] syz-executor.0 (19598): drop_caches: 2 [ 2570.919473] syz-executor.0 (19598): drop_caches: 2 15:03:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80000000, 0x2) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xbf7580c20db9249b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '#!\'!*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 15:03:40 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x3f, 0x8, 0xb, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x9, 0x1ff}}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000440)) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) sendto$inet6(r1, &(0x7f00000000c0)="1fb3ce6f0a04e3aaa1599edc649e1bacd8284fd5fe0efb1d10c909237f85f710457bbd3676023236e449b34818092bb1fefb3ef7348180025dc347f7c358d1842226d436787e3de4ca29c664d133c74125fbb18225c171178a625bdac3c487", 0x5f, 0x800, &(0x7f0000000140)={0xa, 0x4e24, 0x95a, @local, 0x200}, 0x1c) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x4, 0x5, 0x5, 0x0, 0x5, 0x20000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xdaad, 0x1}, 0x18c0, 0x8, 0x100, 0x5, 0x8, 0x4, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r4, 0xa) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/115, 0x1}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000340)=""/255, 0xff}], 0x4, 0x1f, 0x7ff) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000dd884f76234fbc7c0ea500000000"]) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) r4 = dup3(r3, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000019c0)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3}) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xbf7580c20db9249b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '#!\'!*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 15:03:40 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (fail_nth: 1) 15:03:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xbf7580c20db9249b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '#!\'!*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 15:03:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x10, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendto$inet6(r5, &(0x7f00000000c0)="1d9f2336236266aef41abc9beb205fcd37f23da734edac0c116bb179845a8760ac14", 0x22, 0x8010, &(0x7f0000000100)={0xa, 0x4e22, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 15:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) r4 = dup3(r3, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000019c0)) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3}) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3}) 15:03:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80000000, 0x2) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000000, 0x2) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) r4 = dup3(r3, r1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000019c0)) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3}) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80000000, 0x2) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, 0xfffffffffffffffe) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="be000000000000000000040000000800020005000000c31a4af1680aa8486f7c857f83c0ff31c241e36587f56d9c207ed79e578c078e4ebbcb0dac675c9492742b1c89e345f26e1ad68b2bb682c743d2f8152f037347e3503a56c256b7a193f566c0488a60e84cb1922b1f6976cd81360a01187eff2736a7b9fab35aae7b63d310de57c663f1a1aa0b205231160d5d1544c19309f50f305a2233f11ecd7918c0a855f060245f80311fab10db1b3be5572da7d7d2446b72afd86b9d18191839db34e2433ecfe5fc"], 0x1c}}, 0x0) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0x8000000000000000, 0x401}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=""/144, &(0x7f0000000300)=""/149, &(0x7f00000003c0)=""/217, 0x3000}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000000)=""/33, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=""/19, 0x4}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c737405000000636b000a7df3536461fd04f84ea13f8558f7bb0c8aba91b67919bf401999f91d5bef0d67ccb74381b2d1583bb44b3b700ac94739c14afc7b2d0000"], 0x59) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x349100, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000540)={0x2, 0x7fffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) fcntl$getown(r4, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x10, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) sendto$inet6(r5, &(0x7f00000000c0)="1d9f2336236266aef41abc9beb205fcd37f23da734edac0c116bb179845a8760ac14", 0x22, 0x8010, &(0x7f0000000100)={0xa, 0x4e22, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="be000000000000000000040000000800020005000000c31a4af1680aa8486f7c857f83c0ff31c241e36587f56d9c207ed79e578c078e4ebbcb0dac675c9492742b1c89e345f26e1ad68b2bb682c743d2f8152f037347e3503a56c256b7a193f566c0488a60e84cb1922b1f6976cd81360a01187eff2736a7b9fab35aae7b63d310de57c663f1a1aa0b205231160d5d1544c19309f50f305a2233f11ecd7918c0a855f060245f80311fab10db1b3be5572da7d7d2446b72afd86b9d18191839db34e2433ecfe5fc"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="be000000000000000000040000000800020005000000c31a4af1680aa8486f7c857f83c0ff31c241e36587f56d9c207ed79e578c078e4ebbcb0dac675c9492742b1c89e345f26e1ad68b2bb682c743d2f8152f037347e3503a56c256b7a193f566c0488a60e84cb1922b1f6976cd81360a01187eff2736a7b9fab35aae7b63d310de57c663f1a1aa0b205231160d5d1544c19309f50f305a2233f11ecd7918c0a855f060245f80311fab10db1b3be5572da7d7d2446b72afd86b9d18191839db34e2433ecfe5fc"], 0x1c}}, 0x0) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0x8000000000000000, 0x401}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=""/144, &(0x7f0000000300)=""/149, &(0x7f00000003c0)=""/217, 0x3000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000000)=""/33, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=""/19, 0x4}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c737405000000636b000a7df3536461fd04f84ea13f8558f7bb0c8aba91b67919bf401999f91d5bef0d67ccb74381b2d1583bb44b3b700ac94739c14afc7b2d0000"], 0x59) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x349100, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000540)={0x2, 0x7fffffff}) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000540)={0x2, 0x7fffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x5, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001a00)={0x2340, 0x0, 0x5, 0x6, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0xa}, [@typed={0x14, 0x61, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="1e8e7388ba922c50b5aa89fe1836ff14a7a9596a80e8de4f9e91c976c5921de7afab1270b494079ab04e21bcfa301d5c3c990d619431934e7d3830d83df22345f7e5c8fba4c940d3110fdda90195c36ed5e2a96bf0f827761c47b96c5929b72f90f8648b42c3a6ebdba9ec140ea44aa91eb1e9abdd9dddd32dceace6d3fd22bbd3d44a3da93589b5a920ea3e64bad7add318514eb922c8613f493c3f6a34a273ef6f3d1787067dad122098485f55f0cb2c477ef0643e1de29bf3c8dcb5e70a80cc91f6538ec60aa855", @typed={0x4, 0x79}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x7}, @nested={0x160, 0xc, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast2}, @generic="c8ec4eba5f5dbfb6e7efb80aac09dc7890cff71fe535bc251735994a09e3cd3ed1e768e2337cdc2c0e959ce823170b95152852fdccddf7dbfff8bdbbb7aaf850b4de0928d65d01ce6d80e4919e9bb02044283ee2a18d50ca9a9c9114", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x1}, @generic="e130d0", @generic="31e65975efb3f8827075eb3981b5f6bc67", @generic, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@local}, @generic="b7d85b30ce81698172cf8b6d1ca74f690c2a6066e2938968b318a7a432f550f665b20bbacd9075d178b6a775c3ce30b1d5e3cce7ac3f16083b5defbb67078eb1137ec482364c80efcddfc19239c7639a1e03ea9e66374b08de276c62b20a3645ff9a7a8b2b702447ec92e1f7f8b0a91d405eafef70ff3ab56e6927e230a46d090b5d30f1085a93ba19ac9ee6b77883eb8528ddf2285dab90077710b8f776568525c12ecf023c0912f909234687249ec1db4a2a33b3e3e02ebfd2605c19046d94"]}, @nested={0x10ce, 0x78, 0x0, 0x1, [@generic="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", @generic="e8f68655e17ed4e041552e04a0ad842ac2d478b5e3ae5353c532c9103faca36b312748c8af1a1d77846016b1b7fae0ee333cf9c451955113a2c6f8774c5d1104bfe639751d022b0b4aaa8e660ba1e49ef6d1ce85eb9f74eb74b4820d2d145d17be96b7ea2d0b8730dba18161160ff457c4fef6ec0758180418b3f7897bad1fd09466506b4c94055bd0843cf512ad820fd268821ae86862c35c2154282534b303eeff21cd9463", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x8e}]}, @nested={0x10, 0x42, 0x0, 0x1, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x3}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001a00)={0x2340, 0x0, 0x5, 0x6, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0xa}, [@typed={0x14, 0x61, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="1e8e7388ba922c50b5aa89fe1836ff14a7a9596a80e8de4f9e91c976c5921de7afab1270b494079ab04e21bcfa301d5c3c990d619431934e7d3830d83df22345f7e5c8fba4c940d3110fdda90195c36ed5e2a96bf0f827761c47b96c5929b72f90f8648b42c3a6ebdba9ec140ea44aa91eb1e9abdd9dddd32dceace6d3fd22bbd3d44a3da93589b5a920ea3e64bad7add318514eb922c8613f493c3f6a34a273ef6f3d1787067dad122098485f55f0cb2c477ef0643e1de29bf3c8dcb5e70a80cc91f6538ec60aa855", @typed={0x4, 0x79}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x7}, @nested={0x160, 0xc, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast2}, @generic="c8ec4eba5f5dbfb6e7efb80aac09dc7890cff71fe535bc251735994a09e3cd3ed1e768e2337cdc2c0e959ce823170b95152852fdccddf7dbfff8bdbbb7aaf850b4de0928d65d01ce6d80e4919e9bb02044283ee2a18d50ca9a9c9114", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x1}, @generic="e130d0", @generic="31e65975efb3f8827075eb3981b5f6bc67", @generic, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@local}, @generic="b7d85b30ce81698172cf8b6d1ca74f690c2a6066e2938968b318a7a432f550f665b20bbacd9075d178b6a775c3ce30b1d5e3cce7ac3f16083b5defbb67078eb1137ec482364c80efcddfc19239c7639a1e03ea9e66374b08de276c62b20a3645ff9a7a8b2b702447ec92e1f7f8b0a91d405eafef70ff3ab56e6927e230a46d090b5d30f1085a93ba19ac9ee6b77883eb8528ddf2285dab90077710b8f776568525c12ecf023c0912f909234687249ec1db4a2a33b3e3e02ebfd2605c19046d94"]}, @nested={0x10ce, 0x78, 0x0, 0x1, [@generic="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", @generic="e8f68655e17ed4e041552e04a0ad842ac2d478b5e3ae5353c532c9103faca36b312748c8af1a1d77846016b1b7fae0ee333cf9c451955113a2c6f8774c5d1104bfe639751d022b0b4aaa8e660ba1e49ef6d1ce85eb9f74eb74b4820d2d145d17be96b7ea2d0b8730dba18161160ff457c4fef6ec0758180418b3f7897bad1fd09466506b4c94055bd0843cf512ad820fd268821ae86862c35c2154282534b303eeff21cd9463", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x8e}]}, @nested={0x10, 0x42, 0x0, 0x1, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x3}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async, rerun: 64) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async, rerun: 64) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) (rerun: 64) fcntl$getown(r4, 0x9) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x5, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 15:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x10, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r9, 0x0) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r12 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r9}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r10, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r11}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r12, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) sendto$inet6(r5, &(0x7f00000000c0)="1d9f2336236266aef41abc9beb205fcd37f23da734edac0c116bb179845a8760ac14", 0x22, 0x8010, &(0x7f0000000100)={0xa, 0x4e22, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="be000000000000000000040000000800020005000000c31a4af1680aa8486f7c857f83c0ff31c241e36587f56d9c207ed79e578c078e4ebbcb0dac675c9492742b1c89e345f26e1ad68b2bb682c743d2f8152f037347e3503a56c256b7a193f566c0488a60e84cb1922b1f6976cd81360a01187eff2736a7b9fab35aae7b63d310de57c663f1a1aa0b205231160d5d1544c19309f50f305a2233f11ecd7918c0a855f060245f80311fab10db1b3be5572da7d7d2446b72afd86b9d18191839db34e2433ecfe5fc"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="be000000000000000000040000000800020005000000c31a4af1680aa8486f7c857f83c0ff31c241e36587f56d9c207ed79e578c078e4ebbcb0dac675c9492742b1c89e345f26e1ad68b2bb682c743d2f8152f037347e3503a56c256b7a193f566c0488a60e84cb1922b1f6976cd81360a01187eff2736a7b9fab35aae7b63d310de57c663f1a1aa0b205231160d5d1544c19309f50f305a2233f11ecd7918c0a855f060245f80311fab10db1b3be5572da7d7d2446b72afd86b9d18191839db34e2433ecfe5fc"], 0x1c}}, 0x0) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0x8000000000000000, 0x401}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=""/144, &(0x7f0000000300)=""/149, &(0x7f00000003c0)=""/217, 0x3000}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000000)=""/33, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=""/19, 0x4}) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c737405000000636b000a7df3536461fd04f84ea13f8558f7bb0c8aba91b67919bf401999f91d5bef0d67ccb74381b2d1583bb44b3b700ac94739c14afc7b2d0000"], 0x59) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x349100, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000540)={0x2, 0x7fffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x6, 0x8000000000000000, 0x401}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=""/144, &(0x7f0000000300)=""/149, &(0x7f00000003c0)=""/217, 0x3000}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000000)=""/33, &(0x7f0000000040)=""/74, &(0x7f00000000c0)=""/19, 0x4}) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c737405000000636b000a7df3536461fd04f84ea13f8558f7bb0c8aba91b67919bf401999f91d5bef0d67ccb74381b2d1583bb44b3b700ac94739c14afc7b2d0000"], 0x59) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x349100, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000540)={0x2, 0x7fffffff}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x3}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001a00)={0x2340, 0x0, 0x5, 0x6, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0xa}, [@typed={0x14, 0x61, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="1e8e7388ba922c50b5aa89fe1836ff14a7a9596a80e8de4f9e91c976c5921de7afab1270b494079ab04e21bcfa301d5c3c990d619431934e7d3830d83df22345f7e5c8fba4c940d3110fdda90195c36ed5e2a96bf0f827761c47b96c5929b72f90f8648b42c3a6ebdba9ec140ea44aa91eb1e9abdd9dddd32dceace6d3fd22bbd3d44a3da93589b5a920ea3e64bad7add318514eb922c8613f493c3f6a34a273ef6f3d1787067dad122098485f55f0cb2c477ef0643e1de29bf3c8dcb5e70a80cc91f6538ec60aa855", @typed={0x4, 0x79}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x7}, @nested={0x160, 0xc, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast2}, @generic="c8ec4eba5f5dbfb6e7efb80aac09dc7890cff71fe535bc251735994a09e3cd3ed1e768e2337cdc2c0e959ce823170b95152852fdccddf7dbfff8bdbbb7aaf850b4de0928d65d01ce6d80e4919e9bb02044283ee2a18d50ca9a9c9114", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x1}, @generic="e130d0", @generic="31e65975efb3f8827075eb3981b5f6bc67", @generic, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@local}, @generic="b7d85b30ce81698172cf8b6d1ca74f690c2a6066e2938968b318a7a432f550f665b20bbacd9075d178b6a775c3ce30b1d5e3cce7ac3f16083b5defbb67078eb1137ec482364c80efcddfc19239c7639a1e03ea9e66374b08de276c62b20a3645ff9a7a8b2b702447ec92e1f7f8b0a91d405eafef70ff3ab56e6927e230a46d090b5d30f1085a93ba19ac9ee6b77883eb8528ddf2285dab90077710b8f776568525c12ecf023c0912f909234687249ec1db4a2a33b3e3e02ebfd2605c19046d94"]}, @nested={0x10ce, 0x78, 0x0, 0x1, [@generic="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", @generic="e8f68655e17ed4e041552e04a0ad842ac2d478b5e3ae5353c532c9103faca36b312748c8af1a1d77846016b1b7fae0ee333cf9c451955113a2c6f8774c5d1104bfe639751d022b0b4aaa8e660ba1e49ef6d1ce85eb9f74eb74b4820d2d145d17be96b7ea2d0b8730dba18161160ff457c4fef6ec0758180418b3f7897bad1fd09466506b4c94055bd0843cf512ad820fd268821ae86862c35c2154282534b303eeff21cd9463", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x8e}]}, @nested={0x10, 0x42, 0x0, 0x1, [@typed={0xc, 0x32, 0x0, 0x0, @u64=0x3}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="525171241b67419a7472091630d38d8dae8f2eb9c7943b7d69ef72a4061c830df908adc6b1a0fe1ba117ee59bbf65240d6cc6339503b160830ecfca4d154e7e4f84d3b171ce0595897b3951ad81d1f96e4f40d33760c8990932826e1ec5477ae031fd764afab537b70d40d6531db8ce2e0ba8b357fbca8d2afc736d4e6c15782bc514689c26716642a9966c2ede47b5b6d9bb23c1cccf37178e2b3ebcd", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x5, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000040000000842ac6df713623e752563bf69a82d5856dea4d90d085b24e00b805c26164ec83186ae292c151b60298f3aa27a4716aaa64b5d3085824c5cc"]) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x19) 15:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) (async) fcntl$getown(r4, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="525171241b67419a7472091630d38d8dae8f2eb9c7943b7d69ef72a4061c830df908adc6b1a0fe1ba117ee59bbf65240d6cc6339503b160830ecfca4d154e7e4f84d3b171ce0595897b3951ad81d1f96e4f40d33760c8990932826e1ec5477ae031fd764afab537b70d40d6531db8ce2e0ba8b357fbca8d2afc736d4e6c15782bc514689c26716642a9966c2ede47b5b6d9bb23c1cccf37178e2b3ebcd", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="525171241b67419a7472091630d38d8dae8f2eb9c7943b7d69ef72a4061c830df908adc6b1a0fe1ba117ee59bbf65240d6cc6339503b160830ecfca4d154e7e4f84d3b171ce0595897b3951ad81d1f96e4f40d33760c8990932826e1ec5477ae031fd764afab537b70d40d6531db8ce2e0ba8b357fbca8d2afc736d4e6c15782bc514689c26716642a9966c2ede47b5b6d9bb23c1cccf37178e2b3ebcd", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3d3801, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000040000000842ac6df713623e752563bf69a82d5856dea4d90d085b24e00b805c26164ec83186ae292c151b60298f3aa27a4716aaa64b5d3085824c5cc"]) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000040000000842ac6df713623e752563bf69a82d5856dea4d90d085b24e00b805c26164ec83186ae292c151b60298f3aa27a4716aaa64b5d3085824c5cc"]) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x19) (async) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x19) 15:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3d3801, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="525171241b67419a7472091630d38d8dae8f2eb9c7943b7d69ef72a4061c830df908adc6b1a0fe1ba117ee59bbf65240d6cc6339503b160830ecfca4d154e7e4f84d3b171ce0595897b3951ad81d1f96e4f40d33760c8990932826e1ec5477ae031fd764afab537b70d40d6531db8ce2e0ba8b357fbca8d2afc736d4e6c15782bc514689c26716642a9966c2ede47b5b6d9bb23c1cccf37178e2b3ebcd", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3d3801, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="099a1453c946a4333f01b798e58909050f2a87e4b7c71a565a0b4ffc9d3460ec146056d4bbd38030f02afca6c38a03ec0aeedfa82bae0dacd14a6d17ad1651f81f9eb1020cee6bbf3e09050dca42cb7323d73580bbc07417c37b8150c77b10ddb8b8d2658272c036aa317624bb0c9f428aed681d79c1e85bf5"]) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000000000000ee00000400000008001d0005000000"], 0x1c}}, 0x8005) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)) (async, rerun: 64) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = dup3(r2, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000040000000842ac6df713623e752563bf69a82d5856dea4d90d085b24e00b805c26164ec83186ae292c151b60298f3aa27a4716aaa64b5d3085824c5cc"]) (async) open(&(0x7f0000000100)='./file0\x00', 0x80, 0x19) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) 15:03:41 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x2, 0x78}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2b, 0x7, 0x5, 0x4e, 0x0, 0x1f, 0x2fa25, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x7, 0x7}, 0x1003, 0x6, 0x67, 0x2, 0x7ff, 0x0, 0x8000, 0x0, 0x200, 0x0, 0x3}, r2, 0x10, r10, 0x0) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000000000000ee00000400000008001d0005000000"], 0x1c}}, 0x8005) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000000000000ee00000400000008001d0005000000"], 0x1c}}, 0x8005) (async) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="099a1453c946a4333f01b798e58909050f2a87e4b7c71a565a0b4ffc9d3460ec146056d4bbd38030f02afca6c38a03ec0aeedfa82bae0dacd14a6d17ad1651f81f9eb1020cee6bbf3e09050dca42cb7323d73580bbc07417c37b8150c77b10ddb8b8d2658272c036aa317624bb0c9f428aed681d79c1e85bf5"]) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) 15:03:41 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01000000000000ee00000400000008001d0005000000"], 0x1c}}, 0x8005) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r2, 0x80000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3}) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:41 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="099a1453c946a4333f01b798e58909050f2a87e4b7c71a565a0b4ffc9d3460ec146056d4bbd38030f02afca6c38a03ec0aeedfa82bae0dacd14a6d17ad1651f81f9eb1020cee6bbf3e09050dca42cb7323d73580bbc07417c37b8150c77b10ddb8b8d2658272c036aa317624bb0c9f428aed681d79c1e85bf5"]) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:41 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x2, 0x78}) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async, rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) (async) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async, rerun: 64) r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) (rerun: 64) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2b, 0x7, 0x5, 0x4e, 0x0, 0x1f, 0x2fa25, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x7, 0x7}, 0x1003, 0x6, 0x67, 0x2, 0x7ff, 0x0, 0x8000, 0x0, 0x200, 0x0, 0x3}, r2, 0x10, r10, 0x0) 15:03:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r2, 0x80000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) dup3(r1, r2, 0x80000) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r2, 0x80000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000040)=ANY=[@ANYBLOB="a7c0f19a6cb57f4e209a3b968d050d8074534ee4ba65b011cde578f07b2635bc4b0444ed"]) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x250502, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) dup3(r3, r4, 0x80000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x8, 0x100000000, 0x2, 0x1200, 0x9, [{0xd1, 0xe641, 0xfffffffffffffff9, '\x00', 0x1a08}, {0x9, 0x10000, 0x4, '\x00', 0x2}, {0x3f, 0xfffffffffffffffa, 0x2, '\x00', 0x900}, {0x3, 0x8000, 0x8, '\x00', 0x1704}, {0x66, 0x0, 0x7ff, '\x00', 0x2000}, {0x80000000, 0x1, 0x4, '\x00', 0x1000}, {0x200, 0x1, 0x6}, {0x0, 0x3, 0x1, '\x00', 0x800}, {0x8, 0xffff, 0x7}]}) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x8000000000002a4}) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x1000, 0xe7, &(0x7f0000000040)=""/231}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x20000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/66, &(0x7f0000001240)=""/49, 0xf000}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x250502, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) dup3(r3, r4, 0x80000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x8, 0x100000000, 0x2, 0x1200, 0x9, [{0xd1, 0xe641, 0xfffffffffffffff9, '\x00', 0x1a08}, {0x9, 0x10000, 0x4, '\x00', 0x2}, {0x3f, 0xfffffffffffffffa, 0x2, '\x00', 0x900}, {0x3, 0x8000, 0x8, '\x00', 0x1704}, {0x66, 0x0, 0x7ff, '\x00', 0x2000}, {0x80000000, 0x1, 0x4, '\x00', 0x1000}, {0x200, 0x1, 0x6}, {0x0, 0x3, 0x1, '\x00', 0x800}, {0x8, 0xffff, 0x7}]}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x250502, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) (async) dup3(r3, r4, 0x80000) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x8, 0x100000000, 0x2, 0x1200, 0x9, [{0xd1, 0xe641, 0xfffffffffffffff9, '\x00', 0x1a08}, {0x9, 0x10000, 0x4, '\x00', 0x2}, {0x3f, 0xfffffffffffffffa, 0x2, '\x00', 0x900}, {0x3, 0x8000, 0x8, '\x00', 0x1704}, {0x66, 0x0, 0x7ff, '\x00', 0x2000}, {0x80000000, 0x1, 0x4, '\x00', 0x1000}, {0x200, 0x1, 0x6}, {0x0, 0x3, 0x1, '\x00', 0x800}, {0x8, 0xffff, 0x7}]}) (async) 15:03:42 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x2, 0x78}) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x60, 0x870) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r10, 0x0) r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r13 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r8, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r9, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r11, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r12}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r3, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r13, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2b, 0x7, 0x5, 0x4e, 0x0, 0x1f, 0x2fa25, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x7, 0x7}, 0x1003, 0x6, 0x67, 0x2, 0x7ff, 0x0, 0x8000, 0x0, 0x200, 0x0, 0x3}, r2, 0x10, r10, 0x0) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000040000000800020005000000"], 0x1c}}, 0x0) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x8000000000002a4}) (rerun: 64) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x14000, 0x0) (async, rerun: 64) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x250502, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) (async) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) (rerun: 32) dup3(r3, r4, 0x80000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x8, 0x100000000, 0x2, 0x1200, 0x9, [{0xd1, 0xe641, 0xfffffffffffffff9, '\x00', 0x1a08}, {0x9, 0x10000, 0x4, '\x00', 0x2}, {0x3f, 0xfffffffffffffffa, 0x2, '\x00', 0x900}, {0x3, 0x8000, 0x8, '\x00', 0x1704}, {0x66, 0x0, 0x7ff, '\x00', 0x2000}, {0x80000000, 0x1, 0x4, '\x00', 0x1000}, {0x200, 0x1, 0x6}, {0x0, 0x3, 0x1, '\x00', 0x800}, {0x8, 0xffff, 0x7}]}) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x1000, 0xe7, &(0x7f0000000040)=""/231}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x20000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/66, &(0x7f0000001240)=""/49, 0xf000}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x1000, 0xe7, &(0x7f0000000040)=""/231}]}) (async) syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x20000) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/66, &(0x7f0000001240)=""/49, 0xf000}) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000040)=ANY=[@ANYBLOB="a7c0f19a6cb57f4e209a3b968d050d8074534ee4ba65b011cde578f07b2635bc4b0444ed"]) 15:03:42 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7227}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x0, 0x5}, 0x400, 0x81, 0x5, 0x4, 0x0, 0x5, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x6, 0x4, 0x7, 0x52, 0x0, 0x9, 0x80308, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1}, 0x60, 0x401, 0xdb0c, 0x2, 0x200, 0x2, 0xfffa, 0x0, 0x40, 0x0, 0xd62a7a7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x3, 0x2, 0x0, 0xba, 0x0, 0xe00, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc5a, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x3900, 0x5, 0xffffff81, 0x0, 0x1, 0x21, 0x6, 0x0, 0xf1b, 0x0, 0x1}, 0x0, 0x8, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cpuset.effective_mems\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r3, r4, 0x25}, 0x10) close(r3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x1000, 0xe7, &(0x7f0000000040)=""/231}]}) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x20000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001280)={0x1, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/66, &(0x7f0000001240)=""/49, 0xf000}) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000040)=ANY=[@ANYBLOB="a7c0f19a6cb57f4e209a3b968d050d8074534ee4ba65b011cde578f07b2635bc4b0444ed"]) 15:03:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 15:03:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000600000000000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000500)={&(0x7f0000000c40)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0xc080) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x6c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000bc0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r12, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000102030000000000000000000700000513000b0063616c6c666f72776109000000000000000002800600034000020000060003400008f386440400002c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000012c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000106000340000300001400018008000100ac1414200800020064010100"], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@delqdisc={0x50, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xf}, {0x10}, {0x5, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x10000, 0x6, 0x0, 0x3}}}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4074}, 0x1) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x1000, 0xf5, &(0x7f0000000040)=""/245}, {0x2000, 0xe6, &(0x7f0000000140)=""/230}]}) 15:03:42 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x8000000000002a4}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x8000000000002a4}) 15:03:42 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7227}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x0, 0x5}, 0x400, 0x81, 0x5, 0x4, 0x0, 0x5, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x6, 0x4, 0x7, 0x52, 0x0, 0x9, 0x80308, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1}, 0x60, 0x401, 0xdb0c, 0x2, 0x200, 0x2, 0xfffa, 0x0, 0x40, 0x0, 0xd62a7a7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x3, 0x2, 0x0, 0xba, 0x0, 0xe00, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc5a, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x3900, 0x5, 0xffffff81, 0x0, 0x1, 0x21, 0x6, 0x0, 0xf1b, 0x0, 0x1}, 0x0, 0x8, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cpuset.effective_mems\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r3, r4, 0x25}, 0x10) close(r3) (async) close(r3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41080}, 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0xc0}, 0x5045) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000440)=ANY=[@ANYBLOB="1748586115a0731549a619dbfbc97759c57426e8e39f3b00415d918f9915cfd0661474085b53c96f8ce0ac9b12e34226451407c15d6d2f8e0111bb98e03f9288f55813b48908d3e67db2ecdc221514627c510d3fb3eccbab5b76efacdbc52b1396583206fde297ab8aba90db"]) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x2, 0x9}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x1000, 0xf5, &(0x7f0000000040)=""/245}, {0x2000, 0xe6, &(0x7f0000000140)=""/230}]}) 15:03:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x1000, 0xf5, &(0x7f0000000040)=""/245}, {0x2000, 0xe6, &(0x7f0000000140)=""/230}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, 0xfffffffffffffffe) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x1000, 0xf5, &(0x7f0000000040)=""/245}, {0x2000, 0xe6, &(0x7f0000000140)=""/230}]}) (async) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000600000000000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000500)={&(0x7f0000000c40)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0xc080) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x6c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000bc0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r12, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000102030000000000000000000700000513000b0063616c6c666f72776109000000000000000002800600034000020000060003400008f386440400002c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000012c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000106000340000300001400018008000100ac1414200800020064010100"], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@delqdisc={0x50, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xf}, {0x10}, {0x5, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x10000, 0x6, 0x0, 0x3}}}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4074}, 0x1) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x2, 0x9}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:42 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7227}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x0, 0x5}, 0x400, 0x81, 0x5, 0x4, 0x0, 0x5, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x6, 0x4, 0x7, 0x52, 0x0, 0x9, 0x80308, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1}, 0x60, 0x401, 0xdb0c, 0x2, 0x200, 0x2, 0xfffa, 0x0, 0x40, 0x0, 0xd62a7a7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x3, 0x2, 0x0, 0xba, 0x0, 0xe00, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc5a, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x3900, 0x5, 0xffffff81, 0x0, 0x1, 0x21, 0x6, 0x0, 0xf1b, 0x0, 0x1}, 0x0, 0x8, r0, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x24) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cpuset.effective_mems\x00') (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r3, r4, 0x25}, 0x10) (async, rerun: 32) close(r3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 15:03:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41080}, 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0xc0}, 0x5045) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000440)=ANY=[@ANYBLOB="1748586115a0731549a619dbfbc97759c57426e8e39f3b00415d918f9915cfd0661474085b53c96f8ce0ac9b12e34226451407c15d6d2f8e0111bb98e03f9288f55813b48908d3e67db2ecdc221514627c510d3fb3eccbab5b76efacdbc52b1396583206fde297ab8aba90db"]) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x2, 0x9}) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r3 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0x0, 0xce, &(0x7f0000000240)=""/206}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:42 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7227}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x0, 0x5}, 0x400, 0x81, 0x5, 0x4, 0x0, 0x5, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x6, 0x4, 0x7, 0x52, 0x0, 0x9, 0x80308, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1}, 0x60, 0x401, 0xdb0c, 0x2, 0x200, 0x2, 0xfffa, 0x0, 0x40, 0x0, 0xd62a7a7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x3, 0x2, 0x0, 0xba, 0x0, 0xe00, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc5a, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x3900, 0x5, 0xffffff81, 0x0, 0x1, 0x21, 0x6, 0x0, 0xf1b, 0x0, 0x1}, 0x0, 0x8, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='cpuset.effective_mems\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r3, r4, 0x25}, 0x10) close(r3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x1, 0x3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=""/4096, 0x10000}) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000600000000000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x60, 0x870) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000500)={&(0x7f0000000c40)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0xc080) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x6c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) (async) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000bc0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r12, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b00000000102030000000000000000000700000513000b0063616c6c666f72776109000000000000000002800600034000020000060003400008f386440400002c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000012c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000106000340000300001400018008000100ac1414200800020064010100"], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@delqdisc={0x50, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xf}, {0x10}, {0x5, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x10000, 0x6, 0x0, 0x3}}}}, @qdisc_kind_options=@q_atm={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4074}, 0x1) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=""/38, &(0x7f0000000340)=""/232, 0x6001}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xd0, &(0x7f00000004c0)=""/208}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x1, 0x3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=""/4096, 0x10000}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x1, 0x3}) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=""/4096, 0x10000}) (async) 15:03:42 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=""/38, &(0x7f0000000340)=""/232, 0x6001}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xd0, &(0x7f00000004c0)=""/208}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=""/38, &(0x7f0000000340)=""/232, 0x6001}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xd0, &(0x7f00000004c0)=""/208}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41080}, 0xc, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYRESHEX=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0xc0}, 0x5045) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async, rerun: 32) bind$inet6(r3, 0x0, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r3, 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async, rerun: 32) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) (async, rerun: 64) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000440)=ANY=[@ANYBLOB="1748586115a0731549a619dbfbc97759c57426e8e39f3b00415d918f9915cfd0661474085b53c96f8ce0ac9b12e34226451407c15d6d2f8e0111bb98e03f9288f55813b48908d3e67db2ecdc221514627c510d3fb3eccbab5b76efacdbc52b1396583206fde297ab8aba90db"]) 15:03:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 1) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "971f1b13c61602cc7073e7ddf4afa1fa5ced2e281357800f8a42e5ceabc176de"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) 15:03:42 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x1, 0x3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=""/4096, 0x10000}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000011c0)={0x1, 0x0, &(0x7f0000000080)=""/162, &(0x7f0000000140)=""/86, &(0x7f00000001c0)=""/4096, 0x10000}) 15:03:42 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "971f1b13c61602cc7073e7ddf4afa1fa5ced2e281357800f8a42e5ceabc176de"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "971f1b13c61602cc7073e7ddf4afa1fa5ced2e281357800f8a42e5ceabc176de"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) (async) 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x121880, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@xfs={0x1c, 0x81, {0x9, 0x80000000, 0x4, 0x2}}, 0x141003) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:43 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=""/193, &(0x7f0000000140)=""/38, &(0x7f0000000340)=""/232, 0x6001}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xd000, 0xd0, &(0x7f00000004c0)=""/208}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/196, &(0x7f0000000100)=""/105, &(0x7f0000000180)=""/91, 0x100000}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 2573.529264] FAULT_INJECTION: forcing a failure. [ 2573.529264] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.567724] CPU: 0 PID: 20143 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2573.575675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2573.585053] Call Trace: [ 2573.587685] dump_stack+0x1fc/0x2ef [ 2573.591350] should_fail.cold+0xa/0xf [ 2573.595173] ? setup_fault_attr+0x200/0x200 [ 2573.599525] ? lock_acquire+0x170/0x3c0 [ 2573.603532] __should_failslab+0x115/0x180 [ 2573.607789] should_failslab+0x5/0x10 [ 2573.611606] __kmalloc+0x2ab/0x3c0 [ 2573.615159] ? tty_write+0x59e/0x810 [ 2573.618888] ? tty_write+0x24e/0x810 [ 2573.622631] tty_write+0x59e/0x810 [ 2573.626208] ? n_tty_open+0x160/0x160 [ 2573.630029] __vfs_write+0xf7/0x770 [ 2573.634197] ? tty_compat_ioctl+0x270/0x270 [ 2573.638544] ? common_file_perm+0x4e5/0x850 [ 2573.642887] ? kernel_read+0x110/0x110 [ 2573.646808] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2573.651688] ? security_file_permission+0x1c0/0x220 [ 2573.656904] vfs_write+0x1f3/0x540 [ 2573.660474] ksys_write+0x12b/0x2a0 [ 2573.664126] ? __ia32_sys_read+0xb0/0xb0 [ 2573.668880] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2573.674043] ? do_syscall_64+0x21/0x620 [ 2573.678044] do_syscall_64+0xf9/0x620 [ 2573.681868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2573.687073] RIP: 0033:0x7f985c1fb0f9 [ 2573.690801] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2573.709724] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2573.717449] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/196, &(0x7f0000000100)=""/105, &(0x7f0000000180)=""/91, 0x100000}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/196, &(0x7f0000000100)=""/105, &(0x7f0000000180)=""/91, 0x100000}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) 15:03:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x121880, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) (async) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@xfs={0x1c, 0x81, {0x9, 0x80000000, 0x4, 0x2}}, 0x141003) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/196, &(0x7f0000000100)=""/105, &(0x7f0000000180)=""/91, 0x100000}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=""/196, &(0x7f0000000100)=""/105, &(0x7f0000000180)=""/91, 0x100000}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) [ 2573.724745] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2573.732033] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2573.739416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2573.746704] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 2) 15:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "971f1b13c61602cc7073e7ddf4afa1fa5ced2e281357800f8a42e5ceabc176de"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) 15:03:43 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="22f911785298beee2f4538eb9e6cb9cccbe62abaa991bda98bc6756efd", 0x1d, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xf000, 0xbf, &(0x7f0000000240)=""/191}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="92fb621200000000"]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r2}) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x40000, 0x50) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x40101, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2, 0x10001}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) [ 2573.843753] FAULT_INJECTION: forcing a failure. [ 2573.843753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2573.864829] CPU: 1 PID: 20203 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2573.872753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2573.882128] Call Trace: [ 2573.884740] dump_stack+0x1fc/0x2ef [ 2573.888395] should_fail.cold+0xa/0xf [ 2573.892216] ? lock_acquire+0x170/0x3c0 [ 2573.896299] ? setup_fault_attr+0x200/0x200 [ 2573.900683] __alloc_pages_nodemask+0x239/0x2890 [ 2573.905467] ? __lock_acquire+0x6de/0x3ff0 [ 2573.909730] ? get_reg+0x1f0/0x1f0 [ 2573.913896] ? mark_held_locks+0xf0/0xf0 [ 2573.913973] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2573.922885] ? __save_stack_trace+0x72/0x190 [ 2573.927311] ? deref_stack_reg+0x134/0x1d0 [ 2573.931570] ? get_reg+0x176/0x1f0 [ 2573.935129] ? __read_once_size_nocheck.constprop.0+0x10/0x10 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x121880, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async, rerun: 64) bind$inet6(r3, 0x0, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32) shutdown(r3, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@xfs={0x1c, 0x81, {0x9, 0x80000000, 0x4, 0x2}}, 0x141003) (async, rerun: 32) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) (rerun: 32) [ 2573.941041] ? lock_downgrade+0x720/0x720 [ 2573.945220] ? __lock_acquire+0x6de/0x3ff0 [ 2573.949492] alloc_pages_current+0x193/0x2a0 [ 2573.953928] __pmd_alloc+0x37/0x440 [ 2573.957587] __handle_mm_fault+0x1760/0x41c0 [ 2573.962027] ? vm_insert_page+0x9c0/0x9c0 [ 2573.966210] ? check_preemption_disabled+0x41/0x280 [ 2573.971331] handle_mm_fault+0x436/0xb10 [ 2573.975417] __do_page_fault+0x68e/0xd60 [ 2573.979506] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2573.984554] ? spurious_fault+0x840/0x840 [ 2573.984572] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x12, 0x1f, 0x6, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800e85b2a7016fdaa46f342385095151ff90ff725b330977483e4ff0a19ea50c718da2b868df160a8f2be712a84d08461f0a77754a9f2d9dbc8f6af3c44e2436d641ead3790f92bf5c3e3e598db3cc1eca9cefffcb25e990eaf10c0b9000000000000005792b4a3f8187794c6b50e8a5ccc499a0f967d375506bf4bb1ff61cf22ca542a532b12efe9e3e16da90e05d0e8991f5be9d6f4d2131d010d11c3da60a2ffed4a44738fafeeafaa9e5fb627141826f8dc8cb4281d946175c27146a5fb0c7b0c612d42009a557730f71974e1d93b77b184", @ANYRES32=r5, @ANYBLOB="14000200ff01000000000000000000000000000114000600020000000400000000000000000000000800080000040000"], 0x48}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x404c080) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000940)=ANY=[@ANYBLOB="e2dbf2d1b3539d2c438272153423ab546f0663cc3dd770811f248815d622fe99ac18a67fc7402a0fae21f1c0fa9878512bbecefb9b59e285a78a115a6685319732dd0f3274de0b34153705a8bb7a25f10cacaa907135184d749db7e8a497f97079e705cea5e7f767922c5e82aae4c2717436857eed28"]) [ 2573.993568] page_fault+0x1e/0x30 [ 2573.997140] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2574.003046] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2574.022219] RSP: 0018:ffff8880af17fc20 EFLAGS: 00050206 [ 2574.027602] RAX: ffffed1013fcb278 RBX: 0000000000000800 RCX: 0000000000000800 [ 2574.036191] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff88809fe58bc0 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x12, 0x1f, 0x6, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async, rerun: 64) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800e85b2a7016fdaa46f342385095151ff90ff725b330977483e4ff0a19ea50c718da2b868df160a8f2be712a84d08461f0a77754a9f2d9dbc8f6af3c44e2436d641ead3790f92bf5c3e3e598db3cc1eca9cefffcb25e990eaf10c0b9000000000000005792b4a3f8187794c6b50e8a5ccc499a0f967d375506bf4bb1ff61cf22ca542a532b12efe9e3e16da90e05d0e8991f5be9d6f4d2131d010d11c3da60a2ffed4a44738fafeeafaa9e5fb627141826f8dc8cb4281d946175c27146a5fb0c7b0c612d42009a557730f71974e1d93b77b184", @ANYRES32=r5, @ANYBLOB="14000200ff01000000000000000000000000000114000600020000000400000000000000000000000800080000040000"], 0x48}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x404c080) (async) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000940)=ANY=[@ANYBLOB="e2dbf2d1b3539d2c438272153423ab546f0663cc3dd770811f248815d622fe99ac18a67fc7402a0fae21f1c0fa9878512bbecefb9b59e285a78a115a6685319732dd0f3274de0b34153705a8bb7a25f10cacaa907135184d749db7e8a497f97079e705cea5e7f767922c5e82aae4c2717436857eed28"]) [ 2574.043492] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1013fcb277 [ 2574.050783] R10: ffff88809fe593bf R11: 0000000000000000 R12: 0000000020000a00 [ 2574.058070] R13: ffff88809fe58bc0 R14: 00007ffffffff000 R15: 0000000000000000 [ 2574.065484] _copy_from_user+0xfc/0x130 [ 2574.069496] tty_write+0x446/0x810 [ 2574.073059] ? n_tty_open+0x160/0x160 [ 2574.076896] __vfs_write+0xf7/0x770 [ 2574.080552] ? tty_compat_ioctl+0x270/0x270 [ 2574.084905] ? common_file_perm+0x4e5/0x850 [ 2574.089257] ? kernel_read+0x110/0x110 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x12, 0x1f, 0x6, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800e85b2a7016fdaa46f342385095151ff90ff725b330977483e4ff0a19ea50c718da2b868df160a8f2be712a84d08461f0a77754a9f2d9dbc8f6af3c44e2436d641ead3790f92bf5c3e3e598db3cc1eca9cefffcb25e990eaf10c0b9000000000000005792b4a3f8187794c6b50e8a5ccc499a0f967d375506bf4bb1ff61cf22ca542a532b12efe9e3e16da90e05d0e8991f5be9d6f4d2131d010d11c3da60a2ffed4a44738fafeeafaa9e5fb627141826f8dc8cb4281d946175c27146a5fb0c7b0c612d42009a557730f71974e1d93b77b184", @ANYRES32=r5, @ANYBLOB="14000200ff01000000000000000000000000000114000600020000000400000000000000000000000800080000040000"], 0x48}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000002c0)) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x404c080) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000940)=ANY=[@ANYBLOB="e2dbf2d1b3539d2c438272153423ab546f0663cc3dd770811f248815d622fe99ac18a67fc7402a0fae21f1c0fa9878512bbecefb9b59e285a78a115a6685319732dd0f3274de0b34153705a8bb7a25f10cacaa907135184d749db7e8a497f97079e705cea5e7f767922c5e82aae4c2717436857eed28"]) 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x22100a0, 0x0, 0xfe, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) [ 2574.093370] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2574.098343] ? security_file_permission+0x1c0/0x220 [ 2574.103415] vfs_write+0x1f3/0x540 [ 2574.107025] ksys_write+0x12b/0x2a0 [ 2574.110677] ? __ia32_sys_read+0xb0/0xb0 [ 2574.114767] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2574.119923] ? do_syscall_64+0x21/0x620 [ 2574.123919] do_syscall_64+0xf9/0x620 [ 2574.127743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2574.132950] RIP: 0033:0x7f985c1fb0f9 [ 2574.136682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2574.155827] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2574.163553] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2574.170846] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2574.178146] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.185433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x22100a0, 0x0, 0xfe, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x40000, 0x50) (async) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x40000, 0x50) r1 = fcntl$dupfd(r0, 0x0, r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x40101, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2, 0x10001}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) [ 2574.192719] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 3) 15:03:43 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="22f911785298beee2f4538eb9e6cb9cccbe62abaa991bda98bc6756efd", 0x1d, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="22f911785298beee2f4538eb9e6cb9cccbe62abaa991bda98bc6756efd", 0x1d, 0x0, 0x0, 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:03:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xf000, 0xbf, &(0x7f0000000240)=""/191}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="92fb621200000000"]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r2}) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x40000, 0x50) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, 0x0) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) (rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x40101, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2, 0x10001}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (rerun: 32) 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x22100a0, 0x0, 0xfe, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x0, 0x53, &(0x7f00000001c0)=""/83}, {0xf000, 0xbf, &(0x7f0000000240)=""/191}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB="92fb621200000000"]) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r2}) 15:03:43 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)=""/235, &(0x7f0000000100)=""/93, &(0x7f0000000180)=""/249, 0x4000}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x24, r5, 0x607, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}}, 0x1) [ 2574.357226] FAULT_INJECTION: forcing a failure. [ 2574.357226] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.398660] CPU: 0 PID: 20261 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2574.406583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2574.415950] Call Trace: [ 2574.418559] dump_stack+0x1fc/0x2ef [ 2574.422214] should_fail.cold+0xa/0xf [ 2574.426037] ? setup_fault_attr+0x200/0x200 [ 2574.430384] ? lock_acquire+0x170/0x3c0 [ 2574.434387] __should_failslab+0x115/0x180 [ 2574.438650] should_failslab+0x5/0x10 [ 2574.442470] kmem_cache_alloc+0x277/0x370 [ 2574.446654] __pmd_alloc+0xbb/0x440 [ 2574.450303] __handle_mm_fault+0x1760/0x41c0 [ 2574.454748] ? vm_insert_page+0x9c0/0x9c0 [ 2574.458928] ? check_preemption_disabled+0x41/0x280 [ 2574.463967] handle_mm_fault+0x436/0xb10 [ 2574.468053] __do_page_fault+0x68e/0xd60 [ 2574.472142] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2574.477181] ? spurious_fault+0x840/0x840 [ 2574.481356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2574.486227] page_fault+0x1e/0x30 [ 2574.489704] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 15:03:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r4 = accept4$ax25(r2, &(0x7f0000000380)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8054c0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES8=r6, @ANYRES8=r4, @ANYRES16=r6]) 15:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x24, r5, 0x607, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}}, 0x1) 15:03:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)={0x24, r5, 0x607, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x7c}}, 0x1) 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44) [ 2574.495609] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2574.514528] RSP: 0018:ffff8880abd5fc20 EFLAGS: 00050206 [ 2574.519906] RAX: ffffed101389bfa0 RBX: 0000000000000800 RCX: 0000000000000800 [ 2574.527187] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff88809c4df500 [ 2574.534479] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed101389bf9f [ 2574.541767] R10: ffff88809c4dfcff R11: 0000000000000000 R12: 0000000020000a00 [ 2574.549057] R13: ffff88809c4df500 R14: 00007ffffffff000 R15: 0000000000000000 [ 2574.556375] _copy_from_user+0xfc/0x130 [ 2574.560381] tty_write+0x446/0x810 [ 2574.563935] ? n_tty_open+0x160/0x160 [ 2574.567758] __vfs_write+0xf7/0x770 [ 2574.571400] ? tty_compat_ioctl+0x270/0x270 [ 2574.575769] ? common_file_perm+0x4e5/0x850 [ 2574.580107] ? kernel_read+0x110/0x110 [ 2574.584014] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2574.588890] ? security_file_permission+0x1c0/0x220 [ 2574.593935] vfs_write+0x1f3/0x540 [ 2574.597517] ksys_write+0x12b/0x2a0 [ 2574.601199] ? __ia32_sys_read+0xb0/0xb0 [ 2574.605280] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2574.610322] ? do_syscall_64+0x21/0x620 [ 2574.614322] do_syscall_64+0xf9/0x620 [ 2574.618152] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2574.623359] RIP: 0033:0x7f985c1fb0f9 [ 2574.627130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 15:03:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 4) 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44) (async) 15:03:44 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)=""/235, &(0x7f0000000100)=""/93, &(0x7f0000000180)=""/249, 0x4000}) (async, rerun: 32) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async, rerun: 64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) (async, rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r4 = accept4$ax25(r2, &(0x7f0000000380)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8054c0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES8=r6, @ANYRES8=r4, @ANYRES16=r6]) 15:03:44 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="22f911785298beee2f4538eb9e6cb9cccbe62abaa991bda98bc6756efd", 0x1d, 0x0, 0x0, 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) [ 2574.646043] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2574.653744] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2574.661010] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2574.668280] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.675546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.682824] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x44) [ 2574.774746] FAULT_INJECTION: forcing a failure. [ 2574.774746] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.801654] CPU: 0 PID: 20316 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2574.809582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2574.818950] Call Trace: [ 2574.821560] dump_stack+0x1fc/0x2ef [ 2574.825216] should_fail.cold+0xa/0xf [ 2574.829051] ? setup_fault_attr+0x200/0x200 [ 2574.833401] ? lock_acquire+0x170/0x3c0 [ 2574.837398] __should_failslab+0x115/0x180 [ 2574.841643] should_failslab+0x5/0x10 [ 2574.845466] kmem_cache_alloc+0x277/0x370 [ 2574.849650] __anon_vma_prepare+0x5d/0x560 [ 2574.853915] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2574.859128] ? lock_downgrade+0x720/0x720 [ 2574.863301] ? lock_acquire+0x170/0x3c0 [ 2574.867300] ? __pmd_alloc+0x147/0x440 [ 2574.871204] ? prep_transhuge_page+0xa0/0xa0 [ 2574.875630] ? do_raw_spin_unlock+0x171/0x230 [ 2574.880142] ? _raw_spin_unlock+0x29/0x40 [ 2574.884315] __handle_mm_fault+0x289c/0x41c0 [ 2574.888745] ? vm_insert_page+0x9c0/0x9c0 [ 2574.892922] ? check_preemption_disabled+0x41/0x280 [ 2574.897958] handle_mm_fault+0x436/0xb10 [ 2574.902039] __do_page_fault+0x68e/0xd60 [ 2574.906120] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2574.911152] ? spurious_fault+0x840/0x840 [ 2574.915553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2574.920430] page_fault+0x1e/0x30 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2574.923915] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2574.929827] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2574.948740] RSP: 0018:ffff88804d187c20 EFLAGS: 00050206 [ 2574.954120] RAX: ffffed1012a9ee50 RBX: 0000000000000800 RCX: 0000000000000800 [ 2574.961408] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff8880954f6a80 [ 2574.968726] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1012a9ee4f 15:03:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) (async, rerun: 32) bind$inet6(r3, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r3, 0x1) (async, rerun: 64) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async, rerun: 64) r4 = accept4$ax25(r2, &(0x7f0000000380)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x80000) (rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) (async, rerun: 32) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async, rerun: 64) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r5, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8054c0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES8=r6, @ANYRES8=r4, @ANYRES16=r6]) 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2574.976028] R10: ffff8880954f727f R11: 0000000000000000 R12: 0000000020000a00 [ 2574.983314] R13: ffff8880954f6a80 R14: 00007ffffffff000 R15: 0000000000000000 [ 2574.990629] _copy_from_user+0xfc/0x130 [ 2574.994623] tty_write+0x446/0x810 [ 2574.998179] ? n_tty_open+0x160/0x160 [ 2575.002017] __vfs_write+0xf7/0x770 [ 2575.005841] ? tty_compat_ioctl+0x270/0x270 [ 2575.010191] ? common_file_perm+0x4e5/0x850 [ 2575.014529] ? kernel_read+0x110/0x110 [ 2575.018441] ? apparmor_getprocattr+0x11e0/0x11e0 15:03:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2575.023313] ? security_file_permission+0x1c0/0x220 [ 2575.028356] vfs_write+0x1f3/0x540 [ 2575.031925] ksys_write+0x12b/0x2a0 [ 2575.035572] ? __ia32_sys_read+0xb0/0xb0 [ 2575.039657] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2575.044694] ? do_syscall_64+0x21/0x620 [ 2575.048694] do_syscall_64+0xf9/0x620 [ 2575.052525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.057735] RIP: 0033:0x7f985c1fb0f9 15:03:44 executing program 2: lseek(0xffffffffffffffff, 0x7, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2575.061476] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2575.080395] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2575.088121] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2575.096199] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2575.103489] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.110771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2575.118058] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 5) 15:03:44 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)=""/235, &(0x7f0000000100)=""/93, &(0x7f0000000180)=""/249, 0x4000}) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:44 executing program 2: lseek(0xffffffffffffffff, 0x7, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) lseek(0xffffffffffffffff, 0x7, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) 15:03:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) 15:03:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 15:03:44 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xd0000, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x2, r1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffe}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x60, 0x870) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000000c0)=r13) r15 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r15, 0x80086601, &(0x7f0000000300)) 15:03:44 executing program 2: lseek(0xffffffffffffffff, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2575.236737] FAULT_INJECTION: forcing a failure. [ 2575.236737] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.291276] CPU: 1 PID: 20361 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2575.299298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2575.308669] Call Trace: [ 2575.311285] dump_stack+0x1fc/0x2ef [ 2575.314940] should_fail.cold+0xa/0xf [ 2575.318856] ? setup_fault_attr+0x200/0x200 [ 2575.323263] ? lock_acquire+0x170/0x3c0 [ 2575.327264] __should_failslab+0x115/0x180 [ 2575.331561] should_failslab+0x5/0x10 [ 2575.335500] kmem_cache_alloc+0x277/0x370 [ 2575.339673] __anon_vma_prepare+0x2d3/0x560 [ 2575.344023] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 2575.349235] ? lock_downgrade+0x720/0x720 [ 2575.353405] ? lock_acquire+0x170/0x3c0 [ 2575.357400] ? __pmd_alloc+0x147/0x440 [ 2575.361305] ? prep_transhuge_page+0xa0/0xa0 [ 2575.365742] ? do_raw_spin_unlock+0x171/0x230 [ 2575.370261] ? _raw_spin_unlock+0x29/0x40 [ 2575.374436] __handle_mm_fault+0x289c/0x41c0 [ 2575.378871] ? vm_insert_page+0x9c0/0x9c0 [ 2575.383057] ? check_preemption_disabled+0x41/0x280 [ 2575.388101] handle_mm_fault+0x436/0xb10 [ 2575.392189] __do_page_fault+0x68e/0xd60 [ 2575.396280] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2575.401313] ? spurious_fault+0x840/0x840 [ 2575.405494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2575.410361] page_fault+0x1e/0x30 [ 2575.413834] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2575.419736] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2575.438652] RSP: 0018:ffff888089007c20 EFLAGS: 00050206 [ 2575.444034] RAX: ffffed10156b77b0 RBX: 0000000000000800 RCX: 0000000000000800 [ 2575.451326] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff8880ab5bb580 [ 2575.458610] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed10156b77af [ 2575.465897] R10: ffff8880ab5bbd7f R11: 0000000000000000 R12: 0000000020000a00 [ 2575.473181] R13: ffff8880ab5bb580 R14: 00007ffffffff000 R15: 0000000000000000 [ 2575.480594] _copy_from_user+0xfc/0x130 [ 2575.484695] tty_write+0x446/0x810 [ 2575.488269] ? n_tty_open+0x160/0x160 15:03:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async, rerun: 64) bind$inet6(r2, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64) shutdown(r2, 0x1) (rerun: 64) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 15:03:44 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xd0000, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x2, r1}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffe}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (rerun: 32) sendfile(r8, r7, &(0x7f0000002080)=0x60, 0x870) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) (async) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000000c0)=r13) (async, rerun: 32) r15 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (rerun: 32) ioctl$FS_IOC_GETFLAGS(r15, 0x80086601, &(0x7f0000000300)) 15:03:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) [ 2575.492116] __vfs_write+0xf7/0x770 [ 2575.495765] ? tty_compat_ioctl+0x270/0x270 [ 2575.500110] ? common_file_perm+0x4e5/0x850 [ 2575.504455] ? kernel_read+0x110/0x110 [ 2575.508374] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2575.513253] ? security_file_permission+0x1c0/0x220 [ 2575.518310] vfs_write+0x1f3/0x540 [ 2575.521885] ksys_write+0x12b/0x2a0 [ 2575.525669] ? __ia32_sys_read+0xb0/0xb0 [ 2575.529766] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2575.534821] ? do_syscall_64+0x21/0x620 [ 2575.538824] do_syscall_64+0xf9/0x620 [ 2575.542651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.547861] RIP: 0033:0x7f985c1fb0f9 [ 2575.551594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2575.570519] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2575.578246] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2575.585531] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2575.592813] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.600197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2575.607518] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 6) 15:03:45 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xd0000, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x2, r1}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffe}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x60, 0x870) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r11, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r11, 0x0) (async) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async) r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r9, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r10, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r11}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000000c0)=r13) r15 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r15, 0x80086601, &(0x7f0000000300)) 15:03:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 15:03:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x4000, 0x91, &(0x7f0000000040)=""/145}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4800) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2575.729175] FAULT_INJECTION: forcing a failure. [ 2575.729175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2575.741564] CPU: 0 PID: 20414 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2575.749491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2575.758861] Call Trace: [ 2575.761477] dump_stack+0x1fc/0x2ef [ 2575.765139] should_fail.cold+0xa/0xf [ 2575.768967] ? lock_acquire+0x170/0x3c0 [ 2575.772976] ? setup_fault_attr+0x200/0x200 [ 2575.777340] __alloc_pages_nodemask+0x239/0x2890 [ 2575.782121] ? vfs_write+0x1f3/0x540 [ 2575.785852] ? ksys_write+0x12b/0x2a0 [ 2575.789663] ? do_syscall_64+0xf9/0x620 [ 2575.793655] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.799039] ? __schedule+0x88f/0x2040 [ 2575.802951] ? mark_held_locks+0xf0/0xf0 [ 2575.807117] ? mark_held_locks+0xa6/0xf0 [ 2575.811193] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2575.815978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2575.820880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2575.825682] ? __anon_vma_prepare+0x2a6/0x560 [ 2575.830206] ? lock_downgrade+0x720/0x720 [ 2575.834369] ? lock_downgrade+0x720/0x720 [ 2575.838534] ? __anon_vma_prepare+0xc2/0x560 [ 2575.842972] alloc_pages_current+0x193/0x2a0 [ 2575.847405] pte_alloc_one+0x16/0x190 [ 2575.851232] do_huge_pmd_anonymous_page+0x649/0x1e60 [ 2575.856356] ? lock_downgrade+0x720/0x720 [ 2575.860524] ? lock_acquire+0x170/0x3c0 [ 2575.864517] ? __pmd_alloc+0x147/0x440 [ 2575.868425] ? prep_transhuge_page+0xa0/0xa0 [ 2575.872854] ? do_raw_spin_unlock+0x171/0x230 [ 2575.877380] ? _raw_spin_unlock+0x29/0x40 [ 2575.881565] __handle_mm_fault+0x289c/0x41c0 [ 2575.886017] ? vm_insert_page+0x9c0/0x9c0 [ 2575.890206] ? check_preemption_disabled+0x41/0x280 [ 2575.895250] handle_mm_fault+0x436/0xb10 [ 2575.899350] __do_page_fault+0x68e/0xd60 [ 2575.903450] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2575.908494] ? spurious_fault+0x840/0x840 [ 2575.912763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2575.917659] page_fault+0x1e/0x30 [ 2575.921132] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2575.927035] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2575.945952] RSP: 0018:ffff88808f5bfc20 EFLAGS: 00050206 [ 2575.951343] RAX: ffffed1014b7a380 RBX: 0000000000000800 RCX: 0000000000000800 [ 2575.958629] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff8880a5bd1400 [ 2575.965921] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed1014b7a37f [ 2575.973211] R10: ffff8880a5bd1bff R11: 0000000000000000 R12: 0000000020000a00 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4800) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) fcntl$dupfd(r1, 0x406, r0) (async) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4800) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2575.980503] R13: ffff8880a5bd1400 R14: 00007ffffffff000 R15: 0000000000000000 [ 2575.987817] _copy_from_user+0xfc/0x130 [ 2575.991826] tty_write+0x446/0x810 [ 2575.995390] ? n_tty_open+0x160/0x160 [ 2575.999309] __vfs_write+0xf7/0x770 [ 2576.002957] ? tty_compat_ioctl+0x270/0x270 [ 2576.007617] ? common_file_perm+0x4e5/0x850 [ 2576.012049] ? kernel_read+0x110/0x110 [ 2576.015958] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2576.020835] ? security_file_permission+0x1c0/0x220 [ 2576.025881] vfs_write+0x1f3/0x540 15:03:45 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) [ 2576.029447] ksys_write+0x12b/0x2a0 [ 2576.033094] ? __ia32_sys_read+0xb0/0xb0 [ 2576.037179] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2576.042220] ? do_syscall_64+0x21/0x620 [ 2576.046223] do_syscall_64+0xf9/0x620 [ 2576.050042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2576.055244] RIP: 0033:0x7f985c1fb0f9 [ 2576.058975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 15:03:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x4000, 0x91, &(0x7f0000000040)=""/145}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:45 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x82440) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x8, 0x0, [{0x3000, 0xbc, &(0x7f0000000140)=""/188}, {0x1, 0x1000, &(0x7f0000000200)=""/4096}, {0x0, 0xae, &(0x7f0000001400)=""/174}, {0xb000, 0x12, &(0x7f00000012c0)=""/18}, {0x11004, 0x78, &(0x7f0000001300)=""/120}, {0x1, 0x63, &(0x7f0000001380)=""/99}, {0x0, 0xa5, &(0x7f0000001600)=""/165}, {0x16000, 0x25, &(0x7f0000001580)=""/37}]}) sendfile(r2, r3, 0x0, 0x1f) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = signalfd(r0, &(0x7f0000000000)={[0x7f]}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/boot_params', 0x383002, 0x2) signalfd(r6, &(0x7f0000001540)={[0xffffffffffff3558]}, 0x8) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0xc008af12, &(0x7f0000000080)) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) [ 2576.077975] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2576.085729] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2576.093022] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2576.100307] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.107601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.114950] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 7) 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00ffdbdf250100000014002001000000000000000000000000000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd849}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff6b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8d80}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfefa}]}, 0x134}, 0x1, 0x0, 0x0, 0x40011}, 0x48c0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 15:03:45 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) 15:03:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x4000, 0x91, &(0x7f0000000040)=""/145}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:45 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x82440) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (rerun: 64) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x8, 0x0, [{0x3000, 0xbc, &(0x7f0000000140)=""/188}, {0x1, 0x1000, &(0x7f0000000200)=""/4096}, {0x0, 0xae, &(0x7f0000001400)=""/174}, {0xb000, 0x12, &(0x7f00000012c0)=""/18}, {0x11004, 0x78, &(0x7f0000001300)=""/120}, {0x1, 0x63, &(0x7f0000001380)=""/99}, {0x0, 0xa5, &(0x7f0000001600)=""/165}, {0x16000, 0x25, &(0x7f0000001580)=""/37}]}) sendfile(r2, r3, 0x0, 0x1f) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = signalfd(r0, &(0x7f0000000000)={[0x7f]}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/boot_params', 0x383002, 0x2) signalfd(r6, &(0x7f0000001540)={[0xffffffffffff3558]}, 0x8) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r7, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) (rerun: 64) 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00ffdbdf250100000014002001000000000000000000000000000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd849}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff6b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8d80}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfefa}]}, 0x134}, 0x1, 0x0, 0x0, 0x40011}, 0x48c0) (async) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 15:03:45 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x82440) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x8, 0x0, [{0x3000, 0xbc, &(0x7f0000000140)=""/188}, {0x1, 0x1000, &(0x7f0000000200)=""/4096}, {0x0, 0xae, &(0x7f0000001400)=""/174}, {0xb000, 0x12, &(0x7f00000012c0)=""/18}, {0x11004, 0x78, &(0x7f0000001300)=""/120}, {0x1, 0x63, &(0x7f0000001380)=""/99}, {0x0, 0xa5, &(0x7f0000001600)=""/165}, {0x16000, 0x25, &(0x7f0000001580)=""/37}]}) sendfile(r2, r3, 0x0, 0x1f) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = signalfd(r0, &(0x7f0000000000)={[0x7f]}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/boot_params', 0x383002, 0x2) signalfd(r6, &(0x7f0000001540)={[0xffffffffffff3558]}, 0x8) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0xc008af12, &(0x7f0000000080)) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x82440) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)={0x8, 0x0, [{0x3000, 0xbc, &(0x7f0000000140)=""/188}, {0x1, 0x1000, &(0x7f0000000200)=""/4096}, {0x0, 0xae, &(0x7f0000001400)=""/174}, {0xb000, 0x12, &(0x7f00000012c0)=""/18}, {0x11004, 0x78, &(0x7f0000001300)=""/120}, {0x1, 0x63, &(0x7f0000001380)=""/99}, {0x0, 0xa5, &(0x7f0000001600)=""/165}, {0x16000, 0x25, &(0x7f0000001580)=""/37}]}) (async) sendfile(r2, r3, 0x0, 0x1f) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) signalfd(r0, &(0x7f0000000000)={[0x7f]}, 0x8) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/boot_params', 0x383002, 0x2) (async) signalfd(r6, &(0x7f0000001540)={[0xffffffffffff3558]}, 0x8) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r7, 0xc008af12, &(0x7f0000000080)) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r7) (async) 15:03:45 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async) [ 2576.353173] FAULT_INJECTION: forcing a failure. [ 2576.353173] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.369008] CPU: 0 PID: 20486 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2576.376925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2576.386290] Call Trace: [ 2576.388905] dump_stack+0x1fc/0x2ef [ 2576.392571] should_fail.cold+0xa/0xf [ 2576.396403] ? setup_fault_attr+0x200/0x200 [ 2576.400745] ? lock_acquire+0x170/0x3c0 [ 2576.404747] __should_failslab+0x115/0x180 [ 2576.409033] should_failslab+0x5/0x10 [ 2576.413557] kmem_cache_alloc+0x277/0x370 [ 2576.417739] ptlock_alloc+0x1d/0x70 [ 2576.421390] pte_alloc_one+0x68/0x190 [ 2576.425212] do_huge_pmd_anonymous_page+0x649/0x1e60 [ 2576.430339] ? lock_downgrade+0x720/0x720 [ 2576.434504] ? lock_acquire+0x170/0x3c0 [ 2576.438522] ? __pmd_alloc+0x147/0x440 [ 2576.442434] ? prep_transhuge_page+0xa0/0xa0 [ 2576.446861] ? do_raw_spin_unlock+0x171/0x230 15:03:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00ffdbdf250100000014002001000000000000000000000000000100000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd849}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff6b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8d80}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfefa}]}, 0x134}, 0x1, 0x0, 0x0, 0x40011}, 0x48c0) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd849}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff6b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8d80}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfefa}]}, 0x134}, 0x1, 0x0, 0x0, 0x40011}, 0x48c0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) [ 2576.451378] ? _raw_spin_unlock+0x29/0x40 [ 2576.455568] __handle_mm_fault+0x289c/0x41c0 [ 2576.460005] ? vm_insert_page+0x9c0/0x9c0 [ 2576.464187] ? check_preemption_disabled+0x41/0x280 [ 2576.469232] handle_mm_fault+0x436/0xb10 [ 2576.473421] __do_page_fault+0x68e/0xd60 [ 2576.477516] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2576.482565] ? spurious_fault+0x840/0x840 [ 2576.486735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2576.491607] page_fault+0x1e/0x30 [ 2576.495079] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 15:03:45 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000200050000004a8da7b865c9968b3b6e213ae836bad0b13e0068792304f24e6b88d11211451a7af8faf4957e0cacc1360dc92a8d1ee7f36f06e7bf367041b518a18de43081800904121772018359923fa1d8ccf87ee7ff6ab38b724e622d675515c5cb766b261e3d56ea89c83b3fa06ffdd9ca9b2a271559bfda9172b2d49d03143064287613dc850d80e23a452a24"], 0x1c}}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2576.500977] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 0f 01 cb 83 [ 2576.519896] RSP: 0018:ffff88805236fc20 EFLAGS: 00050206 [ 2576.525277] RAX: ffffed10151f4fc0 RBX: 0000000000000800 RCX: 0000000000000800 [ 2576.532570] RDX: 0000000000000800 RSI: 0000000020000200 RDI: ffff8880a8fa7600 [ 2576.539859] RBP: 0000000020000200 R08: 0000000000000001 R09: ffffed10151f4fbf [ 2576.547150] R10: ffff8880a8fa7dff R11: 0000000000000000 R12: 0000000020000a00 [ 2576.554434] R13: ffff8880a8fa7600 R14: 00007ffffffff000 R15: 0000000000000000 [ 2576.561748] _copy_from_user+0xfc/0x130 [ 2576.565753] tty_write+0x446/0x810 [ 2576.569325] ? n_tty_open+0x160/0x160 [ 2576.573154] __vfs_write+0xf7/0x770 [ 2576.576808] ? tty_compat_ioctl+0x270/0x270 [ 2576.581263] ? common_file_perm+0x4e5/0x850 [ 2576.585743] ? kernel_read+0x110/0x110 [ 2576.589657] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2576.594534] ? security_file_permission+0x1c0/0x220 [ 2576.599580] vfs_write+0x1f3/0x540 [ 2576.603142] ksys_write+0x12b/0x2a0 [ 2576.606787] ? __ia32_sys_read+0xb0/0xb0 [ 2576.610872] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2576.615904] ? do_syscall_64+0x21/0x620 [ 2576.619901] do_syscall_64+0xf9/0x620 [ 2576.623731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2576.628923] RIP: 0033:0x7f985c1fb0f9 [ 2576.632640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 15:03:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) (fail_nth: 8) 15:03:46 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000200050000004a8da7b865c9968b3b6e213ae836bad0b13e0068792304f24e6b88d11211451a7af8faf4957e0cacc1360dc92a8d1ee7f36f06e7bf367041b518a18de43081800904121772018359923fa1d8ccf87ee7ff6ab38b724e622d675515c5cb766b261e3d56ea89c83b3fa06ffdd9ca9b2a271559bfda9172b2d49d03143064287613dc850d80e23a452a24"], 0x1c}}, 0x4040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2576.651553] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2576.659272] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2576.666540] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2576.673803] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.681084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.688353] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0xc008af12, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:46 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000180000001f496f4bb7ba06a3348317f9451a9e3c40d4dd6313e87282af362f64d97ed74e16a5ca6db06a11ea7ba1605ce9b7a7bc01d2a73b9c9fac28f5543994ec11b7", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 15:03:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000200050000004a8da7b865c9968b3b6e213ae836bad0b13e0068792304f24e6b88d11211451a7af8faf4957e0cacc1360dc92a8d1ee7f36f06e7bf367041b518a18de43081800904121772018359923fa1d8ccf87ee7ff6ab38b724e622d675515c5cb766b261e3d56ea89c83b3fa06ffdd9ca9b2a271559bfda9172b2d49d03143064287613dc850d80e23a452a24"], 0x1c}}, 0x4040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000200050000004a8da7b865c9968b3b6e213ae836bad0b13e0068792304f24e6b88d11211451a7af8faf4957e0cacc1360dc92a8d1ee7f36f06e7bf367041b518a18de43081800904121772018359923fa1d8ccf87ee7ff6ab38b724e622d675515c5cb766b261e3d56ea89c83b3fa06ffdd9ca9b2a271559bfda9172b2d49d03143064287613dc850d80e23a452a24"], 0x1c}}, 0x4040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 15:03:46 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000180000001f496f4bb7ba06a3348317f9451a9e3c40d4dd6313e87282af362f64d97ed74e16a5ca6db06a11ea7ba1605ce9b7a7bc01d2a73b9c9fac28f5543994ec11b7", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) [ 2576.799863] FAULT_INJECTION: forcing a failure. [ 2576.799863] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.812599] CPU: 0 PID: 20539 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2576.820489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2576.829855] Call Trace: [ 2576.832464] dump_stack+0x1fc/0x2ef [ 2576.836115] should_fail.cold+0xa/0xf [ 2576.839937] ? setup_fault_attr+0x200/0x200 [ 2576.844274] ? mark_held_locks+0xf0/0xf0 15:03:46 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:46 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x2}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000180000001f496f4bb7ba06a3348317f9451a9e3c40d4dd6313e87282af362f64d97ed74e16a5ca6db06a11ea7ba1605ce9b7a7bc01d2a73b9c9fac28f5543994ec11b7", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) [ 2576.848353] ? lock_acquire+0x170/0x3c0 [ 2576.852342] __should_failslab+0x115/0x180 [ 2576.856592] should_failslab+0x5/0x10 [ 2576.860404] __kmalloc+0x6d/0x3c0 [ 2576.863866] ? tty_buffer_alloc+0x23f/0x2a0 [ 2576.868211] ? __mutex_lock+0x368/0x1190 [ 2576.872300] tty_buffer_alloc+0x23f/0x2a0 [ 2576.876469] __tty_buffer_request_room+0x156/0x2a0 [ 2576.881437] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 2576.886998] ? do_raw_spin_lock+0xcb/0x220 [ 2576.891379] pty_write+0x126/0x1f0 [ 2576.894943] n_tty_write+0xa03/0xff0 15:03:46 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sendto$inet6(r0, &(0x7f0000000100)="2edab12ff0e26d51e7e72612d3d394bf849e02c71dc6105e5cce3aa5c9d69c7e5e13d732ec28e0b889734f33588bfdf9edcb04ea0e1cb51857bebd13", 0x3c, 0x4008080, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="181f0000690001e242a200001322cae0beea5c9be83c1a5438e2bbe1ab6228dd8b07d2644d6a48f3b81eb9a5b19e4d5d77"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2001) 15:03:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) [ 2576.898677] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2576.903311] ? n_tty_open+0x160/0x160 [ 2576.907132] ? do_wait_intr_irq+0x270/0x270 [ 2576.911525] ? copy_user_enhanced_fast_string+0xe/0x20 [ 2576.916827] tty_write+0x496/0x810 [ 2576.920389] ? n_tty_open+0x160/0x160 [ 2576.924212] __vfs_write+0xf7/0x770 [ 2576.927867] ? tty_compat_ioctl+0x270/0x270 [ 2576.932206] ? common_file_perm+0x4e5/0x850 [ 2576.936547] ? kernel_read+0x110/0x110 [ 2576.940452] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2576.945332] ? security_file_permission+0x1c0/0x220 [ 2576.950370] vfs_write+0x1f3/0x540 [ 2576.954077] ksys_write+0x12b/0x2a0 [ 2576.957716] ? __ia32_sys_read+0xb0/0xb0 [ 2576.961792] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2576.966832] ? do_syscall_64+0x21/0x620 [ 2576.970822] do_syscall_64+0xf9/0x620 [ 2576.974642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2576.979845] RIP: 0033:0x7f985c1fb0f9 [ 2576.983565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2577.002565] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2577.010280] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2577.017542] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2577.024823] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.032232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2577.039500] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 [ 2577.046787] [ 2577.046792] ====================================================== [ 2577.046796] WARNING: possible circular locking dependency detected [ 2577.046800] 4.19.211-syzkaller #0 Not tainted [ 2577.046804] ------------------------------------------------------ [ 2577.046808] syz-executor.0/20539 is trying to acquire lock: [ 2577.046811] 0000000021fa6bad (console_owner){-.-.}, at: console_unlock+0x3a9/0x1110 [ 2577.046822] [ 2577.046826] but task is already holding lock: [ 2577.046828] 000000006fec2683 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xf4/0x1f0 [ 2577.046838] [ 2577.046842] which lock already depends on the new lock. [ 2577.046843] [ 2577.046845] [ 2577.046849] the existing dependency chain (in reverse order) is: [ 2577.046851] [ 2577.046852] -> #2 (&(&port->lock)->rlock){-.-.}: [ 2577.046863] tty_port_tty_get+0x1d/0x80 [ 2577.046867] tty_port_default_wakeup+0x11/0x40 [ 2577.046870] serial8250_tx_chars+0x490/0xaf0 [ 2577.046873] serial8250_handle_irq.part.0+0x31f/0x3d0 [ 2577.046877] serial8250_default_handle_irq+0xae/0x220 [ 2577.046881] serial8250_interrupt+0x101/0x240 [ 2577.046884] __handle_irq_event_percpu+0x27e/0x8e0 [ 2577.046888] handle_irq_event+0x102/0x290 [ 2577.046890] handle_edge_irq+0x260/0xcf0 [ 2577.046893] handle_irq+0x35/0x50 [ 2577.046896] do_IRQ+0x93/0x1c0 [ 2577.046899] ret_from_intr+0x0/0x1e [ 2577.046903] _raw_spin_unlock_irqrestore+0xa3/0xe0 [ 2577.046906] uart_write+0x3bb/0x6f0 [ 2577.046909] do_output_char+0x5de/0x850 [ 2577.046912] n_tty_write+0x46e/0xff0 [ 2577.046915] tty_write+0x496/0x810 [ 2577.046919] redirected_tty_write+0xaa/0xb0 [ 2577.046922] do_iter_write+0x461/0x5d0 [ 2577.046925] vfs_writev+0x153/0x2e0 [ 2577.046929] do_writev+0x136/0x330 [ 2577.046932] do_syscall_64+0xf9/0x620 [ 2577.046936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.046938] [ 2577.046940] -> #1 (&port_lock_key){-.-.}: [ 2577.046951] serial8250_console_write+0x90e/0xb70 [ 2577.046955] console_unlock+0xbb6/0x1110 [ 2577.046957] vprintk_emit+0x2d1/0x740 [ 2577.046959] vprintk_func+0x79/0x180 [ 2577.046961] printk+0xba/0xed [ 2577.046963] register_console+0x87f/0xc90 [ 2577.046965] univ8250_console_init+0x3a/0x46 [ 2577.046967] console_init+0x4cb/0x718 [ 2577.046969] start_kernel+0x686/0x911 [ 2577.046971] secondary_startup_64+0xa4/0xb0 [ 2577.046972] [ 2577.046974] -> #0 (console_owner){-.-.}: [ 2577.046981] console_unlock+0x411/0x1110 [ 2577.046983] vprintk_emit+0x2d1/0x740 [ 2577.046985] vprintk_func+0x79/0x180 [ 2577.046987] printk+0xba/0xed [ 2577.046989] should_fail+0x66b/0x7b0 [ 2577.046991] __should_failslab+0x115/0x180 [ 2577.046993] should_failslab+0x5/0x10 [ 2577.046995] __kmalloc+0x6d/0x3c0 [ 2577.046997] tty_buffer_alloc+0x23f/0x2a0 [ 2577.046999] __tty_buffer_request_room+0x156/0x2a0 [ 2577.047002] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 2577.047004] pty_write+0x126/0x1f0 [ 2577.047006] n_tty_write+0xa03/0xff0 [ 2577.047008] tty_write+0x496/0x810 [ 2577.047010] __vfs_write+0xf7/0x770 [ 2577.047012] vfs_write+0x1f3/0x540 [ 2577.047014] ksys_write+0x12b/0x2a0 [ 2577.047016] do_syscall_64+0xf9/0x620 [ 2577.047018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.047020] [ 2577.047022] other info that might help us debug this: [ 2577.047023] [ 2577.047025] Chain exists of: [ 2577.047026] console_owner --> &port_lock_key --> &(&port->lock)->rlock [ 2577.047035] [ 2577.047037] Possible unsafe locking scenario: [ 2577.047038] [ 2577.047040] CPU0 CPU1 [ 2577.047043] ---- ---- [ 2577.047044] lock(&(&port->lock)->rlock); [ 2577.047049] lock(&port_lock_key); [ 2577.047054] lock(&(&port->lock)->rlock); [ 2577.047058] lock(console_owner); [ 2577.047062] [ 2577.047064] *** DEADLOCK *** [ 2577.047065] [ 2577.047067] 6 locks held by syz-executor.0/20539: [ 2577.047068] #0: 0000000052cacbdb (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 2577.047077] #1: 00000000d955b542 (&tty->atomic_write_lock){+.+.}, at: tty_write+0x24e/0x810 [ 2577.047085] #2: 00000000914da5a9 (&tty->termios_rwsem){++++}, at: n_tty_write+0x1b5/0xff0 [ 2577.047094] #3: 000000006025008e (&ldata->output_lock){+.+.}, at: n_tty_write+0x9d0/0xff0 [ 2577.047102] #4: 000000006fec2683 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xf4/0x1f0 [ 2577.047111] #5: 000000008950d8bc (console_lock){+.+.}, at: vprintk_func+0x79/0x180 [ 2577.047119] [ 2577.047121] stack backtrace: [ 2577.047124] CPU: 0 PID: 20539 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 2577.047128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 2577.047130] Call Trace: [ 2577.047132] dump_stack+0x1fc/0x2ef [ 2577.047134] print_circular_bug.constprop.0.cold+0x2d7/0x41e [ 2577.047136] __lock_acquire+0x30c9/0x3ff0 [ 2577.047138] ? mark_held_locks+0xf0/0xf0 [ 2577.047140] ? snprintf+0xf0/0xf0 [ 2577.047143] ? console_unlock+0x3ec/0x1110 [ 2577.047145] lock_acquire+0x170/0x3c0 [ 2577.047147] ? console_unlock+0x3a9/0x1110 [ 2577.047149] console_unlock+0x411/0x1110 [ 2577.047151] ? console_unlock+0x3a9/0x1110 [ 2577.047153] vprintk_emit+0x2d1/0x740 [ 2577.047155] vprintk_func+0x79/0x180 [ 2577.047157] printk+0xba/0xed [ 2577.047159] ? log_store.cold+0x16/0x16 [ 2577.047161] ? do_raw_spin_unlock+0x171/0x230 [ 2577.047163] ? __lock_acquire+0x6de/0x3ff0 [ 2577.047165] ? ___ratelimit+0x319/0x590 [ 2577.047167] should_fail+0x66b/0x7b0 [ 2577.047169] ? setup_fault_attr+0x200/0x200 [ 2577.047171] ? mark_held_locks+0xf0/0xf0 [ 2577.047173] ? lock_acquire+0x170/0x3c0 [ 2577.047176] __should_failslab+0x115/0x180 [ 2577.047178] should_failslab+0x5/0x10 [ 2577.047180] __kmalloc+0x6d/0x3c0 [ 2577.047182] ? tty_buffer_alloc+0x23f/0x2a0 [ 2577.047184] ? __mutex_lock+0x368/0x1190 [ 2577.047186] tty_buffer_alloc+0x23f/0x2a0 [ 2577.047188] __tty_buffer_request_room+0x156/0x2a0 [ 2577.047191] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 2577.047193] ? do_raw_spin_lock+0xcb/0x220 [ 2577.047195] pty_write+0x126/0x1f0 [ 2577.047197] n_tty_write+0xa03/0xff0 [ 2577.047199] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2577.047201] ? n_tty_open+0x160/0x160 [ 2577.047203] ? do_wait_intr_irq+0x270/0x270 [ 2577.047206] ? copy_user_enhanced_fast_string+0xe/0x20 [ 2577.047208] tty_write+0x496/0x810 [ 2577.047210] ? n_tty_open+0x160/0x160 [ 2577.047212] __vfs_write+0xf7/0x770 [ 2577.047214] ? tty_compat_ioctl+0x270/0x270 [ 2577.047216] ? common_file_perm+0x4e5/0x850 [ 2577.047218] ? kernel_read+0x110/0x110 [ 2577.047220] ? apparmor_getprocattr+0x11e0/0x11e0 [ 2577.047223] ? security_file_permission+0x1c0/0x220 [ 2577.047225] vfs_write+0x1f3/0x540 [ 2577.047227] ksys_write+0x12b/0x2a0 [ 2577.047229] ? __ia32_sys_read+0xb0/0xb0 [ 2577.047231] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2577.047233] ? do_syscall_64+0x21/0x620 [ 2577.047235] do_syscall_64+0xf9/0x620 [ 2577.047238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.047239] RIP: 0033:0x7f985c1fb0f9 [ 2577.047247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2577.047249] RSP: 002b:00007f985a76d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2577.047255] RAX: ffffffffffffffda RBX: 00007f985c31af80 RCX: 00007f985c1fb0f9 [ 2577.047258] RDX: 000000000000107e RSI: 0000000020000200 RDI: 0000000000000003 [ 2577.047261] RBP: 00007f985a76d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.047264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2577.047267] R13: 00007ffc5e15e9bf R14: 00007f985a76d300 R15: 0000000000022000 15:03:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x107e) 15:03:47 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:03:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) 15:03:47 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sendto$inet6(r0, &(0x7f0000000100)="2edab12ff0e26d51e7e72612d3d394bf849e02c71dc6105e5cce3aa5c9d69c7e5e13d732ec28e0b889734f33588bfdf9edcb04ea0e1cb51857bebd13", 0x3c, 0x4008080, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="181f0000690001e242a200001322cae0beea5c9be83c1a5438e2bbe1ab6228dd8b07d2644d6a48f3b81eb9a5b19e4d5d77"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2001) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="181f0000690001e242a200001322cae0beea5c9be83c1a5438e2bbe1ab6228dd8b07d2644d6a48f3b81eb9a5b19e4d5d77"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2001) 15:03:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r1, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x2}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x2000127e) 15:03:47 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 15:03:47 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) sendto$inet6(r0, &(0x7f0000000100)="2edab12ff0e26d51e7e72612d3d394bf849e02c71dc6105e5cce3aa5c9d69c7e5e13d732ec28e0b889734f33588bfdf9edcb04ea0e1cb51857bebd13", 0x3c, 0x4008080, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="181f0000690001e242a200001322cae0beea5c9be83c1a5438e2bbe1ab6228dd8b07d2644d6a48f3b81eb9a5b19e4d5d77"], 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x2001) 15:03:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) dup3(r1, r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x2}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) 15:03:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x24}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) 15:03:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r1, 0x0, 0x0) (async) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r1, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:47 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 15:03:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=""/111, &(0x7f0000000180)=""/21, &(0x7f00000001c0)=""/177, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) dup(r3) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) signalfd4(r5, &(0x7f0000000300)={[0x7fffffff]}, 0x8, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) 15:03:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r1, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:47 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x2, 0x0, [0x2, 0x8, 0x10000, 0x9, 0x800], [0xfff, 0x3, 0x2, 0x9, 0x1ff, 0x2, 0x3, 0x8, 0x3, 0x1, 0x9, 0x8, 0x7, 0x8, 0x8, 0x1, 0x3, 0x4, 0x1, 0xffffffffffffffff, 0x6, 0x8c3, 0x3, 0x0, 0x2, 0x3, 0x10001, 0x5, 0xfffffffffffeffff, 0x3, 0x7b39, 0x2c48, 0xab7d, 0x10000, 0x6, 0xfffffffffffffffa, 0x1, 0x100, 0x401, 0x5, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff9, 0xda, 0x3f, 0x100000001, 0xffffffffffffffff, 0x401, 0x3, 0xe07, 0x80000001, 0x4c2, 0x8000, 0x0, 0x9, 0x5200000000000000, 0x8001, 0x4, 0x3d2, 0x6ac2, 0x7ff, 0x40, 0x7f, 0x4, 0x4, 0x2, 0x8, 0x1, 0x8111, 0x5ec, 0x4, 0x2, 0x9, 0x8001, 0x381, 0x5, 0x8, 0x200000000, 0xf4ce, 0xf2, 0xbe6b, 0x8000000000000000, 0x11, 0x9, 0xbfb, 0x8, 0x1, 0x6000000, 0x20, 0xcf8d, 0x1, 0x9, 0x8f9c, 0x4, 0x9, 0x2, 0x1f, 0x2, 0x88, 0xc5, 0x34c3, 0x2ada, 0x1000, 0x100000001, 0x2, 0x0, 0xffff, 0x4, 0x6, 0x8005, 0x401, 0x400, 0x7, 0x3, 0xdd, 0x5, 0x1, 0xffff, 0xa008, 0x0, 0x3]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=""/22, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=""/42, 0x10000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) 15:03:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x9, 0x80000, 0x3f) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xb9876324eca7a07b}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c830}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'team0\x00', &(0x7f00000004c0)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r13, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r13, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x80000) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4044050) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x107e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x1, 0x2, 0x4, 0x1, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x2, 0x80, 0x5c, 0x20, "e1283889"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x55d, 0x6, {r4}, 0x3f}, {0x0, 0x7, {r8}, 0xb4}]}, 0x7f}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0xac2, 0x10001, 0x7, 0x2, 0x3, "82a61999d0696f2753e534ae36f5e6b23d27c2", 0x2, 0x200}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000000c0)={0x9, 0x600000, 0x0, 0x100, 0x1, [0x9, 0xca0e, 0x5, 0x9]}) 15:03:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x6) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 32) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x2, 0x0, [0x2, 0x8, 0x10000, 0x9, 0x800], [0xfff, 0x3, 0x2, 0x9, 0x1ff, 0x2, 0x3, 0x8, 0x3, 0x1, 0x9, 0x8, 0x7, 0x8, 0x8, 0x1, 0x3, 0x4, 0x1, 0xffffffffffffffff, 0x6, 0x8c3, 0x3, 0x0, 0x2, 0x3, 0x10001, 0x5, 0xfffffffffffeffff, 0x3, 0x7b39, 0x2c48, 0xab7d, 0x10000, 0x6, 0xfffffffffffffffa, 0x1, 0x100, 0x401, 0x5, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff9, 0xda, 0x3f, 0x100000001, 0xffffffffffffffff, 0x401, 0x3, 0xe07, 0x80000001, 0x4c2, 0x8000, 0x0, 0x9, 0x5200000000000000, 0x8001, 0x4, 0x3d2, 0x6ac2, 0x7ff, 0x40, 0x7f, 0x4, 0x4, 0x2, 0x8, 0x1, 0x8111, 0x5ec, 0x4, 0x2, 0x9, 0x8001, 0x381, 0x5, 0x8, 0x200000000, 0xf4ce, 0xf2, 0xbe6b, 0x8000000000000000, 0x11, 0x9, 0xbfb, 0x8, 0x1, 0x6000000, 0x20, 0xcf8d, 0x1, 0x9, 0x8f9c, 0x4, 0x9, 0x2, 0x1f, 0x2, 0x88, 0xc5, 0x34c3, 0x2ada, 0x1000, 0x100000001, 0x2, 0x0, 0xffff, 0x4, 0x6, 0x8005, 0x401, 0x400, 0x7, 0x3, 0xdd, 0x5, 0x1, 0xffff, 0xa008, 0x0, 0x3]}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=""/22, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=""/42, 0x10000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x4000) (rerun: 64) 15:03:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x9, 0x80000, 0x3f) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xb9876324eca7a07b}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c830}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) (async) r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'team0\x00', &(0x7f00000004c0)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r13, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r13, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x80000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r12) (async) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="43bb2a76e81f61cb6738ef56b25840b9663ea399dbbb27cb241f35179be08cd2c8ae9fb21688d35d1cf377369df2d5a462c7d95f5f4614b97168298574781c7f918c12273bc7ef18c864fa0d3dc22f77d402d7216cfde5f295a2c7b5254b3a014f1a3a6ac94ec56fb69aebbc55c132b7d36beecc6f2c12576b7a25f557"]) 15:03:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=""/111, &(0x7f0000000180)=""/21, &(0x7f00000001c0)=""/177, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) dup(r3) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) (async) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) signalfd4(r5, &(0x7f0000000300)={[0x7fffffff]}, 0x8, 0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) 15:03:48 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x2, 0x0, [0x2, 0x8, 0x10000, 0x9, 0x800], [0xfff, 0x3, 0x2, 0x9, 0x1ff, 0x2, 0x3, 0x8, 0x3, 0x1, 0x9, 0x8, 0x7, 0x8, 0x8, 0x1, 0x3, 0x4, 0x1, 0xffffffffffffffff, 0x6, 0x8c3, 0x3, 0x0, 0x2, 0x3, 0x10001, 0x5, 0xfffffffffffeffff, 0x3, 0x7b39, 0x2c48, 0xab7d, 0x10000, 0x6, 0xfffffffffffffffa, 0x1, 0x100, 0x401, 0x5, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff9, 0xda, 0x3f, 0x100000001, 0xffffffffffffffff, 0x401, 0x3, 0xe07, 0x80000001, 0x4c2, 0x8000, 0x0, 0x9, 0x5200000000000000, 0x8001, 0x4, 0x3d2, 0x6ac2, 0x7ff, 0x40, 0x7f, 0x4, 0x4, 0x2, 0x8, 0x1, 0x8111, 0x5ec, 0x4, 0x2, 0x9, 0x8001, 0x381, 0x5, 0x8, 0x200000000, 0xf4ce, 0xf2, 0xbe6b, 0x8000000000000000, 0x11, 0x9, 0xbfb, 0x8, 0x1, 0x6000000, 0x20, 0xcf8d, 0x1, 0x9, 0x8f9c, 0x4, 0x9, 0x2, 0x1f, 0x2, 0x88, 0xc5, 0x34c3, 0x2ada, 0x1000, 0x100000001, 0x2, 0x0, 0xffff, 0x4, 0x6, 0x8005, 0x401, 0x400, 0x7, 0x3, 0xdd, 0x5, 0x1, 0xffff, 0xa008, 0x0, 0x3]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="085a30b37fe934570500d93c6b994836fc7e36fe3ded6c65300000000000801212b65d0f3b02a691ed4e5bdbcfbbb72de1fe99123bf4e824e9f7a244d4a4a71250a9dfe2d8b8a1364357eb31de1db941a6b3fff2bb6e731e6236d3e62640c6a7178679f9294457efc775f76851bcd59008858c3265b58723df76dd7692783ee07a9f7c168b8fdf783387240856116a9aba5574632076244ba059b098883041e678ecd5dd275b757be36ef831def681e7a3b462b25793ea43f2953fce7654b7026435a195da3c8c40000000616e1ce0f9a9d73919e9173c62ffd6c78f61a1741a091d09846184be7c6705e36af3f10d518fa3c5f62079029cbf43779c639be4de176a35ec1e98ff5e4b0a04bd727c51af6464deb6bc5e658b1d735ace3a292227ad2495271c76d210415e36d6c809f0314abc106264d5df9ea735e1f0aa1b7cbe5e51bce37f00ce"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=""/22, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=""/42, 0x10000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x2, 0x0, [0x2, 0x8, 0x10000, 0x9, 0x800], [0xfff, 0x3, 0x2, 0x9, 0x1ff, 0x2, 0x3, 0x8, 0x3, 0x1, 0x9, 0x8, 0x7, 0x8, 0x8, 0x1, 0x3, 0x4, 0x1, 0xffffffffffffffff, 0x6, 0x8c3, 0x3, 0x0, 0x2, 0x3, 0x10001, 0x5, 0xfffffffffffeffff, 0x3, 0x7b39, 0x2c48, 0xab7d, 0x10000, 0x6, 0xfffffffffffffffa, 0x1, 0x100, 0x401, 0x5, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff9, 0xda, 0x3f, 0x100000001, 0xffffffffffffffff, 0x401, 0x3, 0xe07, 0x80000001, 0x4c2, 0x8000, 0x0, 0x9, 0x5200000000000000, 0x8001, 0x4, 0x3d2, 0x6ac2, 0x7ff, 0x40, 0x7f, 0x4, 0x4, 0x2, 0x8, 0x1, 0x8111, 0x5ec, 0x4, 0x2, 0x9, 0x8001, 0x381, 0x5, 0x8, 0x200000000, 0xf4ce, 0xf2, 0xbe6b, 0x8000000000000000, 0x11, 0x9, 0xbfb, 0x8, 0x1, 0x6000000, 0x20, 0xcf8d, 0x1, 0x9, 0x8f9c, 0x4, 0x9, 0x2, 0x1f, 0x2, 0x88, 0xc5, 0x34c3, 0x2ada, 0x1000, 0x100000001, 0x2, 0x0, 0xffff, 0x4, 0x6, 0x8005, 0x401, 0x400, 0x7, 0x3, 0xdd, 0x5, 0x1, 0xffff, 0xa008, 0x0, 0x3]}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="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"]) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=""/22, &(0x7f0000000080)=""/54, &(0x7f00000000c0)=""/42, 0x10000}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x4000) (async) 15:03:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=""/111, &(0x7f0000000180)=""/21, &(0x7f00000001c0)=""/177, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) dup(r3) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) signalfd4(r5, &(0x7f0000000300)={[0x7fffffff]}, 0x8, 0x800) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0x1) 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async, rerun: 32) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) (async, rerun: 64) bind$inet6(r2, 0x0, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64) shutdown(r2, 0x1) (async, rerun: 64) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="43bb2a76e81f61cb6738ef56b25840b9663ea399dbbb27cb241f35179be08cd2c8ae9fb21688d35d1cf377369df2d5a462c7d95f5f4614b97168298574781c7f918c12273bc7ef18c864fa0d3dc22f77d402d7216cfde5f295a2c7b5254b3a014f1a3a6ac94ec56fb69aebbc55c132b7d36beecc6f2c12576b7a25f557"]) [ 2578.863877] syz-executor.0 (20648): drop_caches: 2 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket(0x9, 0x80000, 0x3f) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xb9876324eca7a07b}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c830}, 0x4800) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x60, 0x870) (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r8, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r11 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r7, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r8}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r9, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r10}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r11, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'team0\x00', &(0x7f00000004c0)=@ethtool_gfeatures={0x3a, 0x5, [{}, {}, {}, {}, {}]}}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, 0x0}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0xc0, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x44, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0xc0}}, 0x0) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r13, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r13, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c4}, 0x80000) (async) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r15, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2578.892693] syz-executor.0 (20648): drop_caches: 2 15:03:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4044050) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x107e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async, rerun: 32) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async, rerun: 32) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x1, 0x2, 0x4, 0x1, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x2, 0x80, 0x5c, 0x20, "e1283889"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x55d, 0x6, {r4}, 0x3f}, {0x0, 0x7, {r8}, 0xb4}]}, 0x7f}) (async, rerun: 32) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0xac2, 0x10001, 0x7, 0x2, 0x3, "82a61999d0696f2753e534ae36f5e6b23d27c2", 0x2, 0x200}) (async, rerun: 64) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000000c0)={0x9, 0x600000, 0x0, 0x100, 0x1, [0x9, 0xca0e, 0x5, 0x9]}) (rerun: 64) 15:03:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@hyper}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)) r4 = dup3(r1, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="0000faffffff0000"]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000019c0)) 15:03:48 executing program 5: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x68ac, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)={@my=0x1}) fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') (async) mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f00000002c0)=ANY=[@ANYBLOB="43bb2a76e81f61cb6738ef56b25840b9663ea399dbbb27cb241f35179be08cd2c8ae9fb21688d35d1cf377369df2d5a462c7d95f5f4614b97168298574781c7f918c12273bc7ef18c864fa0d3dc22f77d402d7216cfde5f295a2c7b5254b3a014f1a3a6ac94ec56fb69aebbc55c132b7d36beecc6f2c12576b7a25f557"]) 15:03:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7a5ddcebb76cbc63}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000400)=""/176, 0xb0}], 0x7}, 0x7}], 0x1, 0x0, &(0x7f0000000d00)={0x77359400}) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7a5ddcebb76cbc63}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:48 executing program 5: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x68ac, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x68ac, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)={@my=0x1}) fcntl$dupfd(r0, 0x406, r1) (async) fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@hyper}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)) r4 = dup3(r1, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="0000faffffff0000"]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000019c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@hyper}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)) (async) dup3(r1, r0, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="0000faffffff0000"]) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000019c0)) (async) 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000400)=""/176, 0xb0}], 0x7}, 0x7}], 0x1, 0x0, &(0x7f0000000d00)={0x77359400}) (async) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000400)=""/176, 0xb0}], 0x7}, 0x7}], 0x1, 0x0, &(0x7f0000000d00)={0x77359400}) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4044050) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x107e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x48, 0x14, 0x403, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x4}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x48}}, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x60, 0x870) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd26, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r12, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async, rerun: 32) r14 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') (async, rerun: 32) r15 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r10, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r11, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r12}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r13, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r14}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r15, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x1, 0x2, 0x4, 0x1, 0xffffffff, {0x77359400}, {0x0, 0x0, 0x2, 0x80, 0x5c, 0x20, "e1283889"}, 0x1, 0x4, {&(0x7f0000000180)=[{0x55d, 0x6, {r4}, 0x3f}, {0x0, 0x7, {r8}, 0xb4}]}, 0x7f}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0xac2, 0x10001, 0x7, 0x2, 0x3, "82a61999d0696f2753e534ae36f5e6b23d27c2", 0x2, 0x200}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000000c0)={0x9, 0x600000, 0x0, 0x100, 0x1, [0x9, 0xca0e, 0x5, 0x9]}) 15:03:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7a5ddcebb76cbc63}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7a5ddcebb76cbc63}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) (async) 15:03:48 executing program 5: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x68ac, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000100)={@my=0x1}) (async) fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) [ 2579.142387] syz-executor.0 (20711): drop_caches: 2 [ 2579.147542] syz-executor.0 (20711): drop_caches: 2 15:03:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) rename(&(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001a40)) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000540)=""/220, 0xdc}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000400)=""/176, 0xb0}], 0x7}, 0x7}], 0x1, 0x0, &(0x7f0000000d00)={0x77359400}) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) shutdown(r2, 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c841}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000004c0)={{0x3, @netrom}, [@remote, @netrom, @netrom, @null, @default, @bcast, @null, @default]}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') mount$9p_virtio(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x804040, &(0x7f0000001c40)=ANY=[@ANYBLOB]) 15:03:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0xc008af12, &(0x7f0000000080)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000000c0)={@hyper}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)) (async) r4 = dup3(r1, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="0000faffffff0000"]) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000019c0)) 15:03:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000090) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xfffffffd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) [ 2579.237798] syz-executor.0 (20761): drop_caches: 2 [ 2579.243205] syz-executor.0 (20761): drop_caches: 2 15:03:48 executing program 5: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x80}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, &(0x7f0000000080)) 15:03:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400030400000000000000000a000000", @ANYRES32=r2, @ANYBLOB="7816ee71339414006053d64800000001140006008cf63dcf8df0d61702000000040000000100000000000000"], 0x48}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000380)=0x60, 0x870) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280f00017200000426bd7000a800000007000000", @ANYRES32=0x0, @ANYBLOB="08000100010000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r6, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r9 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r5, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2, r6}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r7, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r8}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r9, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1030350508693f4819bfcf1b61274e010000a72b76cc01626a6706e297927135d0f50a24381c43c2b47a74ee40316eeb3bf443428d72adb51e20dc2ab1b967a9cdab166a4bc21b3a41e15abf6e7aada1ab6f9d7c5e91e001a23ef8f10daa6acf367e726e77eef3b8f3039ebc7f20ad2ef35c5092cac12abb1ec3ef3bc94e0bf7248c31b3389e4d2e69106a87d78a477a271ecd6abebb953201ffaa45e0629f57a32a745d68", @ANYRES16=0x0, @ANYBLOB="200028bd7000fcdbdf2567000000080001000200000008000300", @ANYRES32=r10, @ANYBLOB="0800c40000010000e200c50022c07bb47aa27a2af980af41e3c8560b92f96d7bfc1121d56519e6809058b422d6daadb37bdc832241f5b4e34fead5052512bb4b01cf43e93e9c4593cbfbef04c7d29c593b1063a75b38af6e83850a7c433ad577778a6691e606c682a0b09185bc827d39e92848df284e66f07ec73feee6b84e69b3de1fcf1adfaef14a92e641700680f470179e88d6306bb8542610c68e996b94a98b56d8684f20925c3214998ad8b621999c45c284f74c51100bf516ac8a5d4d9cf4e53add528c6c405152a65525127fb23c8f49d216d2cfd4ebfcb5b06b1e135959db5f6d5f5baed20f0000"], 0x110}, 0x1, 0x0, 0x0, 0x84}, 0x8800) r11 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, 0xffffffffffffffff, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000800)='numa_maps\x00') r14 = syz_open_dev$vbi(&(0x7f0000000900), 0x3, 0x2) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffff, &(0x7f0000000200)="280a825d8b0589154addb2a84796c5ff0a40e7390172cf644a4d9188159485feeaf114c297deff7904b4ec94368e40d53bb84351988a142cb57e797071b2fcc14b3cfacf693d06cf20b84ce224a213b74c1c2d7579260cacf1754215117c8c776816f55c88d1c2b9c9d3afdb4579cff895e86467e5e59229630541528fcac7a118b10872f6c03e19085273da775e2830e4d76e3e59bf69ff95233568aad3c04be94830f05b68bae663687ece410bafc3d72d9b43f2c9217ee279ec87c1b1f56ffcc4aa3cf40a136e194322231afa", 0xce, 0x40, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f00000004c0)="d3d132772b135d3ad2921a21e4ee257f4785f75f8c0528dceb86b1933f4b64cc6d8d4d8623691f21b3ffd994ac8f1d5f3086590eb292934785a46fa3a8cdb7ff69e9e77338", 0x45, 0x9, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000600)="275e8d855e32310486b5b7dee780d1199f87784994770691fe4c45b3283e06db589894a3daf190dc1b0981892001a789f114e49452a7a1e1a87b2925ea2f3aec29ded61171e74ba54d898be9faf3162f333d0b8ca8832d0be327a0d433ddbd1962c0aa238b750c6fe60621c538cb47879efc51ac1cd1797175fcba5ff69828da5bdaa625a1bbec9f9101cfb4927504b5a4bc956dad1f75e7b58f6b8668f8ad6087c205907a8bf430262961488024bcecf281e2d2", 0xb4, 0x8, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xad, r12, &(0x7f0000000740)="06952d0e2666de7c84403d88c61a183d2cf39c4921322757814408ddd85bd9080cf30649f1edffa7961cc6ce2a5f881eead53c05a9d27ea0df6c04da6011b4b2720e5f53d972d8b75d1ec881c68ac1131f4ac721df3a29f7527321ccef4b8031d103d7382b1e1463bf07718392d4e121c589549f9c6da7827fb2844c92b027b3d65d65aebf17cab57ad2bf15fc304c1cc08b97db098b4b090a3d552256c7", 0x9e, 0xffffffffffffffe1, 0x0, 0x1, r13}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000880)="2ccf5cf2c85bbdf6", 0x8, 0x100, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x3, r14, &(0x7f0000000940)="42d281cdca5bade764ca7c73e87378821345c0a80e725fb3ae75df35dba24be2c7a9887ed3495878e86e528802dcdd1254f11392abda49afe3a5d9f4c933af5fa7e7259488164f0b08a29144b5a5746937a525d51e8a48f987b58e8005b5797d3b0c6f0067c41c1b64c6cc92e0fed9fbfe9cb359878eb59b8e2d19e13b673654322fdada5267d822226b6bb30ad2a3c4d892aeafd0bf5dee6566a7e14ece2b1cfa07d9d1446dceab4fcc08c5b2d5d4d635ea9b9a892af990bd14ab678f50b6f6bbef462ca9ad0f83d7569209c295523c1bd11753d28d7fb53268319d35118d316d5323a0799c48f8cf75", 0xea, 0x1ff, 0x0, 0x2}]) write$sysctl(0xffffffffffffffff, &(0x7f0000000340)='0\x00', 0x2) write$binfmt_script(r11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="fbc245f31b77861ce09da869a8194da1b61ab18b064f3ea86c85241fa7666b80f91140beae1d4fa9674ab1e51c5ae4c9bbc0d45377460fa9b6530694b249b8a209be082a3fd189395fd8f55143f6a545cf27579d6f002e7b08003c4fd6bef581757d8cc7a4073740dde76e5600"/123, @ANYRESOCT=r3, @ANYRESHEX=r9, @ANYRESDEC=r3, @ANYRES8], 0x107e) ioctl$TIOCGSOFTCAR(r11, 0x5419, &(0x7f0000000000)) 15:03:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000090) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0xfffffffd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:03:48 executing program 3: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0xc008af12, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0xc008af12, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000008540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0xc008af12, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008580)={0x0, 0x0}, &(0x7f00000085c0)=0xc) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = timerfd_create(0x0, 0x0) dup2(r4, r5) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x101600, 0x0) r7 = getegid() mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x800, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@afid={'afid', 0x3d, 0x3}}, {@privport}, {@aname={'aname', 0x3d, ' *:* \x98\xff\xad@\xc3S\xef~\xd5\x8a\xe0\xde\x1a\xbd\x9a8t\xfd\x91\xde\xf3V\xb6ay]\x0e\x85\x8d1\xeb\'\xebJC,\xa3B\xa8k[\xd8\xc90\xee\xf7\x16\xbb\xb4\x96\\<\xd7\xf2\xde\xe1\xd6\xe9\x0ekO\v\xc5G\x16x\xa4\xc0u1*ZD\xd7:Y#Xk\xedi\xef<\xb9d\f\x94\x86\xbdl\x8d\xff\xbbrp\x90o\v\xf7DY_}\xd9\\^Q5\xa7\x11\x94\xb1a\x15,{`\xdc\x94-\x9b\xf5N\xd7'}}, {@cache_mmap}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute}, {@pcr={'pcr', 0x3d, 0x1b}}, {@context={'context', 0x3d, 'system_u'}}, {@dont_hash}]}}) r8 = syz_open_dev$rtc(&(0x7f0000008600), 0x3, 0x440401) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0xc008af12, &(0x7f0000000080)) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000008640), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000008680)=0x0) r12 = accept4$ax25(0xffffffffffffffff, &(0x7f00000086c0)={{}, [@default, @rose, @default, @default, @default, @bcast, @default]}, &(0x7f0000008740)=0x48, 0x4053e64b736924d4) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r13, 0xc008af12, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008880)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000080)="4f4ef222d4acd8cff5fffa1cd7cbde8c6dea568925814eeb68e7c4a8e5d96e66b947b50992198ce181d0b9f978bcda9029f517bf2753d06fc29a1ee272575a8003638f1bf0dc24ab3b7ce7191fb607a6e80c988935af2b0a48c0fc01cb955c45cea640c6090789eaf7bcacbd34814f36b73023e898d0d9b424738042f3b70ab62076736c5fb9909d2b52683808bb50f535b3b1e2aea151f74118057b3d83a722c3d984bf9df39b9786cddb63", 0xac}, {&(0x7f0000000140)="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