7e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:32 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:32 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 15:59:32 executing program 2: bpf$MAP_CREATE_CONST_STR(0x19, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f}, 0x48) 15:59:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 15:59:32 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x8051) 15:59:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:32 executing program 2: syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000004d80), 0x0, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) dup3(r0, r1, 0x0) io_submit(r2, 0x1, &(0x7f0000000cc0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 15:59:32 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) [ 560.569264][ T9376] loop2: detected capacity change from 0 to 32768 [ 560.605673][ T9376] /dev/loop2: Can't open blockdev 15:59:34 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0xfffffffffffffffe) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:34 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:34 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) 15:59:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x0) 15:59:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:35 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:35 executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x1a, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f}, 0x48) 15:59:35 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) 15:59:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:36 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) 15:59:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 15:59:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:37 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:37 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) 15:59:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x10, r0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a0a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:37 executing program 2: syz_io_uring_setup(0x7b60, &(0x7f00000001c0), &(0x7f0000000040), 0x0) 15:59:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:37 executing program 2: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) syz_open_dev$audion(&(0x7f00000007c0), 0x3, 0x40) 15:59:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:38 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file1\x00', 0x2008414, &(0x7f0000000040)=ANY=[], 0x1, 0xf23, &(0x7f0000001e40)="$eJzs3U9sHFcZAPA367+J3XjdFpq2NAktJW0AJ3VyKLdUikCqqqoX7q3SpI1wSyDl0KpRXE6pxKGoKociDkXtDSkckGiFhCokJP70wBUOqIILCAUpUiVEpNjI9nvr9bMnux6vZ23v7yd9fvvmzc73jddx5q133wZgYDWWv546dbAI4Z2P3j7zzSsLv1radri1x5Hlr0XsNUMII239Ijvep3HDrRuvn11qF7I2hNmlew2n8fD09dZ9J0II8+FI+Dg0w+Fjzc+uDj11/oN3Pzl6+eKTL27LyQMAwIC59se5vz76zz98dfrmtUOnw1hre7o+b8b+RLzuPxGv79N1fyOs7Rdt0W40228oRiPbbyjbbzjLM1ySbyQ7zkjJfqMd8g21bdvoPAEAAGA3SvPaZigaM2v6jcbMzMq8f8mnU6PFzMsX5s5f6lOhAAAAQGWfXVl+0a3YFTG+A2oQQgghhBBCCLEbY3Gq389AAAAAAIMmrTvQWh8sN5+vLLA1raM1u8t//YnGxveHHuj087fdP291//uTf3P533/DbxwAAKrbq1eT6bzSdfTEm/uW+/k6gkPZ/TZ7/d/IjjO8yTrL1hXcLesNltWZf193qrL6N/s49ktZ/fl6mDtVWf35Op07VVn9YzXXUVVZ/eO75HdQWY37aq6jqrL699dcR1Vl9U/UXEdVZfVP1lxHVWX131FzHVWV1X+g5jqqKqt/t7ystqz+Zs11VFVW/3TNdVRVVv+dNddRVVn9d9VcR1Vl9d9dcx398kBs0/fhUDbemj9vMKfbLXM8AAAAGHT/s/6f6GEc3gE1CCG2HEM7oAYhhBBCCNHjuNLvJyAAAACAvkvvC0jvel+M0vhQh/HhDuMjtx0far0PuOz+Yx3G1/tvxz0AAABgr/n11fP3vlWsvs9/q+vhjcc2rb+02XWM8vUIN5t/q+uebTX/blm3DAAAgMFSfOPjhWNn3ntl+ua1Q6fbZr8Lcb6b1gEdjs8NfBj76XUBk1m/SHPo02vzNEr2y58fuKPseM9s8UQBAABggKX5ezMUjZm2eXczNBozM6vz8YNhpDh/Ye7cidhPn8/y+6nxEMLcucdqrhsAAADo3up8v9gXNpj/p8/xPRhGi5mXL8ydv7TSn2xtH2m0Py8wtbp9+fmCx1rHW7t9tmT7ydhPn9/54tS+5e0zZ78z93yPzx0AAAAGxaVXX/v2c3Nz577nhhslN65s6l5H4k/WDinejYo3+vyLCQAA6LkP/vH2n75/cvI3K+//X13/Lr3/P83mmnFtvz/HHdLrBNL7ANa9X//ZtXmmyva7uHa/ZrbfUIyxrO7xtuO0L7qX7jddlq+59jijJfkmsnyT7fk2WKdgONs/5TuQbc/XJ0z7TWXb83UYh7McRZb/wWz/HwcAAABYdfyVly4ev/Tqa1+78NJzL5x74dzLJ0/Mfn328dnZU7PHl1/Xf7z91f0AAADAbrT6ot9+VwIAAAAAAAAAAAAAAAAAAACDq46PE+v3OQIAAMCg+8+VEMK8EEIIIYQQop6In0Ddw2MWfT8nIQYh/tbzf7t1x+Ji/knzAAAAANvr1o3Xz7a368wXPc3XOlpzpVmIeVP7u4d/+vBSpN2uP7H2+ZL9Pa2GQVf3z//t8w/3Of8GBjz/+2/0Nv94utH177/G2gOcrpb3yz/61yPt+e8b7jJ/fv7PVMt/NMt/NHSXf/G9LP+z1fI/kuXf32X+ded/sVr+R2P+g6meh7rNv/bxH4ttOo99XeY/lp3/86Hb/Nn5N7tMmPlKzA8Ag6jR7wK2SbpKSNfRE7GfzjfNbPJXP2z2+r+RHWeDGVMl6bjpOuie2E/XS5NZ3mSz9U9kx7ujYp253fKqkrL6e/U4brey+kdqrqOqsvpHa66jqrL6x2quo6qy+sdrrqOqsvq7nYf2W1n9u+V55bL6J2quo6qy+idrrqOqsvo3+/94v5TVf6DmOqoqq3/qNvfZSf+3ldVf8Wm12pXVP11zHVWV1X9nzXVUVVb/XTXXUVVZ/XfXXEe/3B/bsvlwmn9OxbHUb2b9sQ2+l239xWjbzgMAAAAo92/r/wkhxNaisQNqEGLAY6npdw2DGt/9S/9rqDmKlRt9r0OI7Y3Fxf7XIHoe/iQ/2Lb33cwA7FR+/w82j/9g8/gPNo8/t5New19k/WSow/hwh/GRDuOj2Xj+8zrWYfyu7Lj5GxHu7jD+uQ7jBzqM39Nh/GCH8Xs7jN/XYfz+DuMAAAAMhs/H1vwQAAAA9q7LP//wh788+uyN6ZvXDp0Oo+vWnT8R+2Pxb+tXYz9f9z4ZiX/z/0Hs/yy2v43t37P9vf4EAAAAtl/6nBh//wcAAIC9K31Oqfk/AAAA7F3TsTX/BwAAgL3rztia/wMAAMAeVoxvvDm26XmBB2Pb7bp+AMDO94XYPhDbQ7E9HNsvxjZdBzwU2y/VVB8A0Ds/+dabj79VrK73fzIbvxW3p3ad+ZVnCorG2pX898V2f2wf7rKe/PMAus2fHOgyz3bln9pifgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg72gsfz116mARwjsfvX1m6vKZF5a2HW7tcWT5axF7zRDCSOt+aXS1/4u4460br59dahdiuxjbIsyGIhSt8fD09VamiRDCfDgSPg7NcPhY87OrQ0+d/+DdT45evvjki9v4LQAAAIA97/8BAAD//z8qN84=") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x64342, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0xcb29) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000020105e) sendfile(r0, r1, 0x0, 0x1000000201005) 15:59:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 15:59:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:38 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:38 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 15:59:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 15:59:39 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 565.607448][ T9488] loop2: detected capacity change from 0 to 4096 15:59:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 15:59:39 executing program 1: ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) [ 565.839655][ T28] audit: type=1800 audit(1704383979.253:31): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 15:59:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) [ 565.912864][ T28] audit: type=1800 audit(1704383979.293:32): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 565.999447][ T28] audit: type=1804 audit(1704383979.313:33): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3703143553/syzkaller.SxMiDE/244/bus" dev="sda1" ino=1961 res=1 errno=0 15:59:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 15:59:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000fc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000f80), 0x111}}, 0x20) 15:59:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:40 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:40 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:40 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 15:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x30}}, 0x0) 15:59:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:40 executing program 4: add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 15:59:40 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000900)) 15:59:40 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:40 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0) 15:59:41 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f0000000400)) 15:59:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:41 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:41 executing program 4: r0 = socket(0x2, 0x2, 0x0) read$alg(r0, &(0x7f0000000000)=""/130, 0x82) 15:59:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:41 executing program 2: clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, r0/1000+60000}) 15:59:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) [ 568.461872][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.468292][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 15:59:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x30}}, 0x0) 15:59:42 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:42 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\'}\x00', r0) 15:59:42 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002340)=[{&(0x7f0000000000)="c2", 0x1}, {0x0}], 0x2, 0x0) 15:59:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:42 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x270900, 0x0) 15:59:42 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000480)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 15:59:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 15:59:43 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:43 executing program 4: setresgid(0xee00, 0xee00, 0xee01) 15:59:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:43 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 15:59:43 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) keyctl$chown(0x7, r0, 0x0, 0x0) 15:59:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:43 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 15:59:43 executing program 2: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xee00, 0x0) 15:59:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:44 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 15:59:44 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:44 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0xfffffffffffffde1) 15:59:44 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) 15:59:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:44 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x3000) 15:59:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8955, 0x0) 15:59:44 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x10, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:44 executing program 4: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) 15:59:44 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x101c01, 0x0) 15:59:44 executing program 2: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) 15:59:45 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x10, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:45 executing program 4: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x2}, 0x0, 0x0) 15:59:45 executing program 2: socketpair(0x10, 0x2, 0x2, &(0x7f0000000100)) 15:59:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8954, 0x0) 15:59:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x10, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:45 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="8b", 0x1, 0xfffffffffffffffe) keyctl$chown(0x7, r0, 0x0, 0x0) 15:59:45 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:46 executing program 2: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r0) 15:59:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:46 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0), 0x0, 0x0, 0x0) 15:59:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 15:59:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) 15:59:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 15:59:46 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x1}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7603]}, 0x8}) 15:59:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 15:59:46 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 15:59:47 executing program 4: socket$inet(0x2, 0x0, 0x7e7e9254) 15:59:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 15:59:47 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\\', 0x1, r0) keyctl$link(0x8, r1, r0) 15:59:47 executing program 2: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r0}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2b-256-generic\x00'}}, 0x0, 0x0) 15:59:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 15:59:47 executing program 2: socketpair(0x9, 0x0, 0x0, &(0x7f0000000280)) 15:59:47 executing program 4: timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}, 0x0) 15:59:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:48 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:48 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 15:59:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, 0x0) 15:59:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 15:59:48 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 15:59:48 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 15:59:48 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 15:59:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x5421, 0x0) 15:59:48 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "c1d3763badb30967aeffe09999123c41035ed398ba0930ae41a98a4bfd63cba1655e43c966403f93151dfc6319672149c2d698d6225c83cb69d5a697d4be85c9"}, 0x48, r0) keyctl$update(0x2, r1, &(0x7f0000000100)="c0", 0x1) 15:59:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001140)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 15:59:49 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}, 0x0) 15:59:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, r2, r0) 15:59:49 executing program 1: mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xae) 15:59:49 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:49 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000140)={0x5}) 15:59:49 executing program 1: keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'blake2b-256-generic\x00'}}, 0x0, 0x0) 15:59:49 executing program 2: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0xf, r0, 0x0, 0x0) 15:59:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:49 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 15:59:49 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5411, 0x0) 15:59:49 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x40087602, 0x0) 15:59:50 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 15:59:50 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, 0x0) 15:59:50 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 15:59:50 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:50 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 15:59:50 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 15:59:50 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) 15:59:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:50 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 15:59:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 15:59:50 executing program 4: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x0) 15:59:50 executing program 1: getgroups(0x1, &(0x7f0000000300)=[0x0]) 15:59:50 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) 15:59:50 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 15:59:51 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:51 executing program 1: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="d1", 0x1, r1) keyctl$get_security(0x11, r2, 0x0, 0x0) 15:59:51 executing program 4: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x2, 0xffffffffffffffff, 0x0) 15:59:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x34}}, 0x0) 15:59:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:51 executing program 1: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 15:59:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) 15:59:51 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) 15:59:51 executing program 1: syz_open_dev$usbfs(&(0x7f0000000c40), 0x6, 0x0) 15:59:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 15:59:51 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 15:59:52 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:52 executing program 1: add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)="1211e04c40311c5315a6fdcfdd52b7af494bb4c8c61a80c9647d5512a164bf2e2bb6b6f0e955303221b7cd0c17c390f53e13d21d8669579719f919442338f4b7467c197d3dc43f82c6c473b5d83d014bce8c48532f31c1960800100000000043e092f181a1bc93e058593f7604b73831e12ff83f4a962a08e59b6ed5001a8ad00f36f0b8ba57450c9ddd8d1a5f8e707117627df312aa9deb64540f19e9801d483f83cff30ed7764a19dccd931b07ead9db9df04a91022bc9cfe8145b38a6326bf2b340dfbae10c2f18981e413e64a393bc9ce46098e8d228ad3ddf39b3dd054d6c2ca24b6a592c44558b67ed9a5854f2c1ff888ee3b8b45be4808c0f6050d9ceb0e6c6e0bfd1f09f04941dc5fc87b6e9a67c89d7a50bd0d1331f1d5c48c8471f44ca3d23439b25df1de2b5f90c9c4c8f836a3e27acf22e071c0d1d03d92d9dcf4c1db1b8711380a6e2a9d95da32439b0eededefea12a118ace1abb4438c52601d4", 0xffffffffffffff02, 0x0) 15:59:52 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80087601, 0x0) 15:59:52 executing program 2: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) userfaultfd(0x80000) r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\'}\x00', r0) keyctl$revoke(0x3, r0) 15:59:52 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000240)) 15:59:52 executing program 2: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) userfaultfd(0x80000) r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\'}\x00', r0) keyctl$revoke(0x3, r0) 15:59:52 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 15:59:52 executing program 2: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) userfaultfd(0x80000) r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\'}\x00', r0) keyctl$revoke(0x3, r0) 15:59:52 executing program 4: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) 15:59:52 executing program 1: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000940)="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", 0x1000, r0) [ 579.555431][ T9886] Invalid option length (480) for dns_resolver key 15:59:53 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:53 executing program 2: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) userfaultfd(0x80000) r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\'}\x00', r0) keyctl$revoke(0x3, r0) 15:59:53 executing program 1: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 15:59:53 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x5451, 0x0) 15:59:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:53 executing program 1: r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 15:59:53 executing program 4: shmget$private(0x0, 0x2000, 0x1030, &(0x7f0000ffe000/0x2000)=nil) 15:59:53 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x40, 0x0) 15:59:53 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000a00)) 15:59:53 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:59:53 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0161bb9424000000000003002000180002"], 0x30}}, 0x0) [ 580.597294][ T9915] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 580.657054][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:59:54 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:59:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:54 executing program 4: keyctl$chown(0xe, 0x0, 0x0, 0x0) 15:59:54 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:54 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 15:59:54 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:59:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:54 executing program 2: syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) 15:59:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 15:59:54 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x5}) 15:59:54 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 15:59:54 executing program 2: syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x38d080) 15:59:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 15:59:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:55 executing program 4: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "f2cecd471b784ce38408683b5e788e0be1ce2b8dc838fc22b4c56d6bf03e4fb4770b75845cba458fd82d8ed1395fca435381f683597f416ea78dc60e8e21bd5b"}, 0x48, r0) keyctl$update(0x2, r1, &(0x7f0000000100)='/', 0x1) 15:59:55 executing program 2: io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_setup(0x6a7, &(0x7f0000000840)={0x0, 0x0, 0x400}) 15:59:55 executing program 1: syz_open_dev$vcsu(&(0x7f0000000800), 0x0, 0x0) 15:59:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:55 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 15:59:55 executing program 4: keyctl$KEYCTL_PKEY_DECRYPT(0xe, &(0x7f0000002040), 0x0, 0x0, 0x0) 15:59:55 executing program 1: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) 15:59:55 executing program 2: add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="844f9aa91f56e18867a424fda51f6b5828746c17e7a3a73cbb1b5f3e2b", 0x1d, 0xfffffffffffffffd) 15:59:56 executing program 4: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) 15:59:56 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x102, 0x0) 15:59:56 executing program 4: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, r0) 15:59:56 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:56 executing program 4: io_uring_setup(0x6a7, &(0x7f0000000840)={0x0, 0x0, 0x40c}) 15:59:56 executing program 1: io_uring_setup(0x2f53, &(0x7f0000000100)={0x0, 0x0, 0x1}) 15:59:56 executing program 2: arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000040)) 15:59:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:56 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15:59:57 executing program 4: r0 = memfd_create(&(0x7f0000000f00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x100000e, 0x2012, r0, 0x0) 15:59:57 executing program 1: add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="84", 0x1, 0xfffffffffffffffd) 15:59:57 executing program 2: r0 = syz_io_uring_setup(0x22c0, &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 15:59:57 executing program 4: add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 15:59:57 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000280)={0x12}) 15:59:57 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x0, 0xffffffff], 0x2) 15:59:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:58 executing program 1: r0 = io_uring_setup(0x3ef7, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x20) 15:59:58 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "b740417b67bc302ef599e4e60bb256e3164c8d65a04b656d6354a9638f5f76b14ee48e644cb7d44af2d11ee83c3565a3ef6a307ca92445cd058986671b0bbf1c"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 15:59:58 executing program 2: r0 = io_uring_setup(0x6a7, &(0x7f0000000840)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 15:59:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 15:59:58 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15:59:58 executing program 4: syz_open_dev$vcsu(&(0x7f00000003c0), 0x0, 0x0) 15:59:58 executing program 2: socket(0x297227f21c6dccb2, 0x0, 0x0) 15:59:58 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0xfffffda6) 15:59:58 executing program 4: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x4) 15:59:58 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 15:59:58 executing program 1: request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 15:59:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 15:59:59 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 15:59:59 executing program 1: request_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0) 15:59:59 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) 15:59:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 586.616947][ T28] audit: type=1800 audit(1704384000.033:34): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 16:00:00 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 16:00:00 executing program 1: io_uring_setup(0x1e1a, &(0x7f0000000740)={0x0, 0x0, 0x800}) 16:00:00 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:00 executing program 2: io_uring_setup(0x0, &(0x7f0000000840)={0x0, 0x0, 0x535c0100}) 16:00:00 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 587.090210][ T28] audit: type=1800 audit(1704384000.513:35): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 16:00:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) 16:00:00 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000001440)={0x1, 0x0, {0x0, 0x0, 0x0, 0xa, 0x0, 0x800}}) [ 587.319907][T10060] rtc_cmos 00:00: Alarms can be up to one day in the future [ 587.347284][ T28] audit: type=1800 audit(1704384000.763:36): pid=10057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 16:00:01 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:01 executing program 1: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0xfffff, 0x0) 16:00:01 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000380)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 16:00:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:01 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 588.084661][ T28] audit: type=1800 audit(1704384001.503:37): pid=10067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 16:00:02 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:02 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="94", 0x1, r0) 16:00:02 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x200) 16:00:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a0a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:02 executing program 1: r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0x0, 0x0) 16:00:02 executing program 2: socketpair(0x11, 0x3, 0xc321, &(0x7f0000000000)) [ 589.158995][ T28] audit: type=1800 audit(1704384002.583:38): pid=10084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 16:00:02 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:02 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f00000009c0), 0x20242, 0x0) 16:00:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:03 executing program 2: r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="b2", 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 16:00:03 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 589.646207][ T28] audit: type=1800 audit(1704384003.063:39): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 589.798924][ T28] audit: type=1800 audit(1704384003.223:40): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 16:00:04 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 16:00:04 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:04 executing program 2: io_uring_setup(0x6a7, &(0x7f0000000840)={0x0, 0x0, 0x4000}) 16:00:04 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:04 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "ce2883737f506988fff6d3e493d20a224f9a0850b8797d940daea3d5eb7c19a2de24d94c782944e17aa6c2c5d2df6cd9878e419d570733b74dbad9a3d2ba7ee4"}, 0x48, r0) keyctl$revoke(0x3, r1) 16:00:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x88a8}]}) 16:00:04 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:04 executing program 1: io_uring_setup(0xddf, &(0x7f0000000640)={0x0, 0x0, 0x100}) 16:00:04 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 16:00:04 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:05 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:05 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:05 executing program 1: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2c100, 0x0) 16:00:05 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0xa, 0x0, &(0x7f0000002080)=ANY=[], 0x0, 0x0) 16:00:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:05 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 16:00:05 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:05 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, 0x0}, 0x20) 16:00:06 executing program 2: io_uring_setup(0x6a7, &(0x7f0000000840)={0x0, 0x0, 0x4}) 16:00:06 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "f82b8268999ccd6a662202bb05012f0fd820000000a0f5294c2c23c1fadbbd5fcfe04beae2efe3303db26e1e7bb2a7a7280687ba289082ed0356a2943cead096"}, 0x48, 0xfffffffffffffffb) 16:00:06 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x8001, 0x0, '\x00', {0x0, @reserved}}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:07 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:07 executing program 1: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='sha3-224\x00', r0) 16:00:07 executing program 2: request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='sha3-224\x00', 0x0) 16:00:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:07 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "4e01618a126597764342af6fa7655d8fbf5ae4fb02e63fcd8f79cd88fd1b5f0b19e4647d2fdc78acd613d57ba3c0886ac575782b27215aad6328c5008a91455d"}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) [ 594.040939][ T28] audit: type=1800 audit(1704384007.463:41): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 16:00:07 executing program 2: add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="b2", 0x1, 0xfffffffffffffffb) 16:00:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:07 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000040)='user\x00', 0x0, 0x0) 16:00:07 executing program 1: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], &(0x7f0000000240)}, 0x20) [ 594.459248][ T28] audit: type=1800 audit(1704384007.883:42): pid=10187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=28 res=0 errno=0 16:00:07 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0xfffffffffffffe97) 16:00:08 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000140)="5217796c78d8cceadab3e7f9", 0xc, r0) 16:00:08 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:08 executing program 1: syz_clone(0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_clone(0x83c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 16:00:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:08 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:09 executing program 2: socketpair(0x10, 0x0, 0x0, &(0x7f00000000c0)) [ 595.616680][ T28] audit: type=1800 audit(1704384009.033:43): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=30 res=0 errno=0 16:00:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:09 executing program 2: getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 16:00:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003a80), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) [ 595.976396][ T28] audit: type=1800 audit(1704384009.363:44): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=32 res=0 errno=0 16:00:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:09 executing program 2: keyctl$revoke(0xb, 0x0) 16:00:09 executing program 1: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 16:00:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 596.455367][ T28] audit: type=1800 audit(1704384009.863:45): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=34 res=0 errno=0 16:00:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, r0) 16:00:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 596.784784][ T28] audit: type=1800 audit(1704384010.183:46): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=36 res=0 errno=0 16:00:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:11 executing program 1: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 16:00:11 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 16:00:11 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:11 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:11 executing program 2: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 597.782804][ T28] audit: type=1800 audit(1704384011.203:47): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=38 res=0 errno=0 16:00:11 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:11 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 16:00:11 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003a80), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x10000000) 16:00:12 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0x0, 0x0) [ 598.629457][ T28] audit: type=1800 audit(1704384012.053:48): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=40 res=0 errno=0 16:00:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:13 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) 16:00:13 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 16:00:13 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:13 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xfffffffffffffffc) [ 599.763507][ T28] audit: type=1800 audit(1704384013.183:49): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=42 res=0 errno=0 16:00:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:13 executing program 2: r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) [ 599.963671][ T28] audit: type=1800 audit(1704384013.383:50): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=44 res=0 errno=0 16:00:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:13 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x7fffffff}, 0x8) 16:00:13 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003a80), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001680), r0) [ 600.560133][ T28] audit: type=1800 audit(1704384013.983:51): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=46 res=0 errno=0 16:00:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:15 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:15 executing program 2: r0 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x0) 16:00:15 executing program 1: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) 16:00:15 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:15 executing program 2: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) 16:00:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) [ 601.718843][ T28] audit: type=1800 audit(1704384015.143:52): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=48 res=0 errno=0 16:00:15 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:15 executing program 2: r0 = io_uring_setup(0xddf, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000002d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 16:00:15 executing program 1: r0 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r0) 16:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000380)={0x10, 0x12}, 0x10}], 0x1}, 0x0) [ 602.317887][ T28] audit: type=1800 audit(1704384015.743:53): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=50 res=0 errno=0 16:00:16 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:16 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:16 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x7, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x4, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) [ 603.346913][ T28] audit: type=1800 audit(1704384016.773:54): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=52 res=0 errno=0 16:00:16 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:16 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0xe, 0x2004, 0x0, @prog_id=0xffffffffffffffff}, 0x20) 16:00:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x15, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:16 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="4eacaf3173c3894a5239f80000000000000000400011000000"], 0x14}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket(0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @local}, &(0x7f0000000680)=0x10) r4 = accept4$inet(r2, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10, 0x1800) fstat(r4, &(0x7f00000007c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000840)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r3, 0x34, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001e00)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) 16:00:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18b0390000001e0040"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 603.769265][ T28] audit: type=1800 audit(1704384017.193:55): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=54 res=0 errno=0 16:00:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:18 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000080)=""/108, &(0x7f0000000000)=0x6c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$netlink(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000380)={0x1a0, 0x17, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="1241ca44db8f4a70b62ca4644eb492deb3530e6b3d93ddd6d65cd8da422c83627efcf6072ed1", @nested={0x8d, 0x71, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @ipv4=@local}, @generic="b26c71720bf5f39075dbc2bb8474aa571d5cd819b1e3cb08096046ef16e0e8e9cb13c653045f94af075c3e08836113304d2d5dd456f7dd81d71372d6787519c1cf6c9260ee37141515cd3de08b8a567277ae4782f4f59f467ba2e152fd794882b0be0ece01d12df65e37997a44e46d5a13aa0c31068d07cddf609af86c0e9448e8"]}, @generic="27abde07eae1b2078916b7f0a31bf6a49406eccdb4f80d711bcdd5ea8d332aa4d16f631ba8dd99b62482f51f95c0f7f58ffff2f9753d4f800a18a80d8681d21d5ed3d04fd8db1e5dbce46b99c67c7c6391e0da29e4a5bd5e434c00fd3ad0e04e516baa39e05187d25bc376b53899c03054b74910a5d9ed0d55da95220ffb0a412db0e8dfd650fe59f362961595989ce34a37f8d54ca3345ab8e257fc74a33c4ca16cfc11ce00a7b5e8680146e95d4a36c21a07a57c2adff64f0070a9afe6d905a9d3170bd508265f9e07df476021b912c7a3a679936879a24e"]}, 0x1a0}, {&(0x7f0000000540)={0x138, 0x2e, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x122, 0x38, 0x0, 0x1, [@typed={0x33, 0x8b, 0x0, 0x0, @binary="a32226544bdbdca5b4af8a0a37c48bd0b01d3745445f72a0f142c19cb17a5986a1cbd946454d8116f69400258cd292"}, @typed={0x8, 0x9, 0x0, 0x0, @uid}, @generic="c11a480f5dd183b70b00ff9e7b5189cafad1ed7bd28c63012b4a3352f8649f0fcc63e35b3e423e70bb3a979807b6ad6795ed14d95a0e108fa56bff71b9bcc1d1438525617134ec165c0a39137f4e4d3c5cddf1472dba7d1efeb82d6bfeec3b0f2a1733cd5eab142aeaea0cb9fe565e7d7fa80c91fc29452ed6f19e0f664207c23d931c141fb65b6b695855f3539cdecad713147e708605ce29ccfbe453e3ca644776ea9cb519839cb02a3334d8d024bc19210f856af27cd2a8216dd5aad1e2efee17616372792b735c7a229c513eef3c6d9b", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @typed={0x4, 0x4a}]}, 0x138}, {&(0x7f0000000680)={0xcc, 0x14, 0x4, 0x70bd2a, 0x25dfdbff, "", [@generic="4393b006c228cc7b4d2bd8e8bb74fef27298ee35c8987c036fdf3fa84224fa9059a53b71fd8c85712edde9a78396aedd7b0d4da6cf507cb226b30da06950d2fdcd71c74c6089ac2f2e966d61f84195a3c3c426479b67d00eaa4493493c445fd0e0f8bcb9c1c569342db83b4c6315b2dd099a39aa5d03b5fa82c17c4e1e91a0e20a11374a832f8f9eb397f75bc90f912f43ff86c57b3b2389472d635566bc5da8b5d25931c2c37eabfbe75e26785c7385f3988cfef453a5c1", @generic="76d8"]}, 0xcc}, {&(0x7f0000000780)={0x102c, 0x2a, 0x20, 0x70bd29, 0x25dfdbff, "", [@generic="944558acac70db498ecf288e7a9d7bb33b5ea326d86aabe489", @generic="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"]}, 0x102c}, {&(0x7f00000017c0)={0x135c, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x24, 0x31, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x7}, @generic="8f05238173745d3d", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x8}]}, @typed={0x8, 0x7c, 0x0, 0x0, @u32=0xffffffc1}, @nested={0x1ae, 0x62, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}, @generic="b14676f8d7a571abde9d31cf4022b514042939a4083b3622fd6bdb4f30f540a5d45d6807280bf714cad14014c17f3e6bab87f09a4fa6a39cd5ae7574fb2a91da4d55e247df96d6ddf5a6e01b4383ae2a0e30c799613e0ed7f3cf164e4cfbb06c942752d26e5516a1fa16d70d7aac8135a18ee79b718447e516118e22e31aeb873a5cb2db7d9781f07bab18803482e525bdcef0aebc9af48c5e8353bce051a73155ce1d0ad88eaa37f3d57ddfc0f437d116f68d6b2fef0a435c63d60627ee39c9db61334e154e092db15dd70eca747364c45b786d2629", @generic="2b459c72f26b900ddea019e63906a936349f70cb44ac4667c3126762aabd13ef5c18cd63c0368dab4eaf25e2dd7c8ae03d8f47cba62aab35e4cadc597c82b5d12c02a7a1093e62a16dffa60c0e7933caa6c311f808bdf6aa422d97e5", @generic="56dfb7693b4866802bdac657b2d63b91d603d33d8457180907b8d95698a1514f723e33e66d3d2b0a80b7fc9397abda819c427c025ba868ad93b27ff853ee747844be1c445e7aa50e02c107568aff259309681429a760d5def6d79558a3747905a19e05659c5b74dc", @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @generic="886017706ec8e11a4075c636495c5b031fe638165927c521071d38d0e77406732c1d67787b6adfa11765eee284e8b3f8f73ad564e1178b2cee2329275eac12e55b9b4086503fb06027fbede6d2af9db81977cb6fc2f200bc43c7dc058519e56011ba3f0467e2ef76d9bc29fd125c09fffd44b1c0e6750d2c40d64f2b2570685bd9243992c142e5889469dc0a20d393006e4fb82dce807e66d1c17ab77f2149f3dea58c2ec9507eb1b1fc0a4c30eca30e730823522f33ba5c04cecdced8ed7891acf79c4d3c0afcb9a7034b023e", @nested={0x8, 0x47, 0x0, 0x1, [@typed={0x4, 0x4c}]}, @nested={0x108a, 0x10, 0x0, 0x1, [@typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="8daa136f591b85f4e3365a9a4544b5f717ef9f7bea51cb4f8ce15ab226f7d95798dad0087ff9f0a5af9f8cce71485d58b9816e8e9319d49b1c2c74b3d94e", @typed={0x3d, 0x3c, 0x0, 0x0, @binary="8e2097d7c06ef79ec5b3de8062586e59108d3edcafdae63d47666bd0a9a280e43d7cfeb559b938f492b4dfd3f82080ea9e748eff1de752352b"}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, 0x135c}], 0x5}, 0x0) 16:00:18 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2) 16:00:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 605.026775][ T28] audit: type=1800 audit(1704384018.443:56): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=56 res=0 errno=0 16:00:18 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r1}}, 0x18) 16:00:18 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) [ 605.685853][ T28] audit: type=1800 audit(1704384019.103:57): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=58 res=0 errno=0 16:00:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:19 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e00)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 16:00:19 executing program 2: getresuid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000001d80)) [ 606.098699][ T28] audit: type=1800 audit(1704384019.473:58): pid=10384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=60 res=0 errno=0 16:00:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:20 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:20 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x9, &(0x7f0000000000)=@raw=[@ringbuf_output], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x2, &(0x7f00000000c0)=""/2, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10}, 0x90) 16:00:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff49) 16:00:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan4\x00'}]}, 0x20}}, 0x0) [ 607.076179][ T28] audit: type=1800 audit(1704384020.493:59): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=62 res=0 errno=0 16:00:20 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 16:00:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x5}], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:20 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f0000000040)='GPL\x00'}, 0x90) [ 607.526283][ T28] audit: type=1800 audit(1704384020.943:60): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=64 res=0 errno=0 16:00:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:21 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 16:00:21 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x8, 0x19, &(0x7f00000000c0)=""/25}, 0x90) 16:00:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:21 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:21 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@map=0x1, 0xffffffffffffffff, 0x33}, 0x20) 16:00:21 executing program 2: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000001500)={@map=0x1, 0xffffffffffffffff, 0xb}, 0x20) [ 608.535065][ T28] audit: type=1800 audit(1704384021.943:61): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=66 res=0 errno=0 16:00:22 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a80)={'sit0\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}}}}) [ 608.720793][ T28] audit: type=1800 audit(1704384022.143:62): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=68 res=0 errno=0 16:00:22 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) write$tcp_mem(r0, 0x0, 0x0) 16:00:22 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:22 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 609.482801][ T28] audit: type=1800 audit(1704384022.903:63): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=70 res=0 errno=0 16:00:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x2, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x40) 16:00:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 16:00:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:23 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:23 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000880)=@raw=[@func], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) [ 610.084060][ T28] audit: type=1800 audit(1704384023.503:64): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=72 res=0 errno=0 16:00:23 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:23 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001e00)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) 16:00:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) [ 610.513420][ T28] audit: type=1800 audit(1704384023.933:65): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=74 res=0 errno=0 16:00:24 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:24 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x63, 0x31, 0x35, 0x39, 0x31, 0x32, 0x34, 0x30, 0x65, 0x35, 0x39, 0x66, 0x66, 0x30, 0x63]}, &(0x7f0000000080)={0x0, "3f8d756df534a9b2689bcf051b09eba0085422b857df3499ffae259d1e7db1c0ecd6e10e8a1c3e0aeac2e4cc7c19997dd0b8d8af6e85fc7d389a941b84084c5a", 0x28}, 0x48, 0xfffffffffffffffb) 16:00:25 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:25 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 16:00:25 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 16:00:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7f01, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 16:00:25 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x35, 0xa, 0xffffffffffffffff, @prog_id}, 0x20) [ 611.736100][ T28] audit: type=1800 audit(1704384025.153:66): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=76 res=0 errno=0 16:00:25 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:25 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x18, 0x30, 0xffffffffffffffff, @link_id}, 0x20) 16:00:25 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0xffffffffffffffff) [ 612.230415][ T28] audit: type=1800 audit(1704384025.653:67): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=78 res=0 errno=0 16:00:26 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "5ecc7fac84b71fe1a645290da85c748991a22e334f9817e1b7f704c19f867f6042e285210b8aaa536cef430a05f12f30007f869c9a3fe478256449f7377b9731"}, 0x48, 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, r0) 16:00:26 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xc, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:26 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 16:00:26 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:26 executing program 1: socketpair(0xa, 0x1, 0x6, &(0x7f0000000080)) 16:00:26 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x149703, 0x0) 16:00:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) [ 613.253347][ T28] audit: type=1800 audit(1704384026.673:68): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=80 res=0 errno=0 16:00:26 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) [ 613.574007][ T28] audit: type=1800 audit(1704384026.993:69): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=82 res=0 errno=0 16:00:27 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x400c040) 16:00:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) 16:00:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:28 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:28 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x2}], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 614.646381][ T28] audit: type=1800 audit(1704384028.063:70): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=84 res=0 errno=0 16:00:28 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 16:00:28 executing program 2: bpf$PROG_LOAD_XDP(0x15, 0x0, 0x0) 16:00:28 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:28 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@ifindex, 0xffffffffffffffff, 0x16, 0x10}, 0x20) 16:00:28 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00'}, 0x90) [ 615.082906][ T28] audit: type=1800 audit(1704384028.503:71): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=86 res=0 errno=0 16:00:28 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x1c, 0x2020, 0x0, @prog_fd}, 0x20) 16:00:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000), 0xfffffffffffffcef) 16:00:29 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x15, 0x4) [ 616.204871][ T28] audit: type=1800 audit(1704384029.623:72): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=88 res=0 errno=0 16:00:29 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:29 executing program 2: r0 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='?', 0x1, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, r0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) 16:00:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000900)=""/37, &(0x7f0000000940)=0x25) 16:00:29 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:29 executing program 2: r0 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='?', 0x1, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, r0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) [ 616.522369][ T28] audit: type=1800 audit(1704384029.943:73): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=90 res=0 errno=0 16:00:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x1ffff000, 0x2}, 0x0) 16:00:30 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 616.915767][ T28] audit: type=1800 audit(1704384030.333:74): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=92 res=0 errno=0 16:00:31 executing program 1: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x28}}, 0x0) 16:00:31 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x1a, 0xffffffffffffffff, @link_id}, 0x20) 16:00:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 617.833268][ T28] audit: type=1800 audit(1704384031.253:75): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=94 res=0 errno=0 16:00:31 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:31 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f00000000c0)) 16:00:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:31 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d456f9", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 16:00:31 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffff8) 16:00:31 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf4240, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 618.135082][ T28] audit: type=1800 audit(1704384031.543:76): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=96 res=0 errno=0 16:00:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700), 0x111}}, 0x20) [ 618.418571][ T28] audit: type=1800 audit(1704384031.813:77): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=98 res=0 errno=0 16:00:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:32 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x0) 16:00:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 618.772172][ T28] audit: type=1800 audit(1704384032.193:78): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=99 res=0 errno=0 16:00:33 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:33 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x17, 0x4) 16:00:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:33 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "4e4200259a7d45c32aad6ec942ab447cc860fa39a8e35ca91d185611d88c5b8c255e6cab8ab94dabeddf5253c9c3e5469e889d4693672fd5ce5b5b01fac5f535"}, 0x48, 0xfffffffffffffffe) 16:00:33 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 16:00:33 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={@cgroup, 0xffffffffffffffff, 0x2b, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) [ 620.081627][ T28] audit: type=1800 audit(1704384033.503:79): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=100 res=0 errno=0 16:00:33 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:33 executing program 2: bpf$PROG_LOAD_XDP(0xb, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0}, 0x90) 16:00:33 executing program 1: socketpair(0xa, 0x1, 0x84, &(0x7f0000000080)) 16:00:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) [ 620.391337][ T28] audit: type=1800 audit(1704384033.803:80): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=101 res=0 errno=0 16:00:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:34 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0xb, 0x0, 0x0, @prog_id}, 0x20) 16:00:34 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:34 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 16:00:34 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) [ 621.565301][ T28] audit: type=1800 audit(1704384034.983:81): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=103 res=0 errno=0 16:00:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x38) 16:00:35 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x16, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:35 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:35 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/time_for_children\x00') 16:00:35 executing program 2: add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000240)="41b8339c11277411cbf9bb30e41eff7ce953a63cb98bcddaac046c06556a468a", 0x20, 0xfffffffffffffffc) 16:00:35 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 621.942162][ T28] audit: type=1800 audit(1704384035.353:82): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=105 res=0 errno=0 [ 622.241354][ T28] audit: type=1800 audit(1704384035.663:83): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=107 res=0 errno=0 16:00:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a0a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:36 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000180)=""/4096}, 0x90) 16:00:36 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x16, 0x0, 0x0, @link_id}, 0x20) 16:00:36 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:36 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:36 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x105, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) [ 623.159341][ T28] audit: type=1800 audit(1704384036.573:84): pid=10690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=109 res=0 errno=0 16:00:36 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001e00)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001e00)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r4}, 0x18) [ 623.391750][ T28] audit: type=1800 audit(1704384036.813:85): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=111 res=0 errno=0 16:00:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 16:00:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) 16:00:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000001500)={&(0x7f0000001400), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14}, 0xf}}, 0x0) 16:00:37 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:37 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x33, 0x2009}, 0x20) 16:00:37 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) [ 624.116385][ T28] audit: type=1800 audit(1704384037.533:86): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=113 res=0 errno=0 16:00:38 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:38 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:38 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@map=0x1, 0xffffffffffffffff, 0x15}, 0x20) 16:00:38 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x105200, 0x0) 16:00:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 624.954918][ T28] audit: type=1800 audit(1704384038.373:87): pid=10737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=115 res=0 errno=0 16:00:38 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:38 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@map=0x1, 0xffffffffffffffff, 0x26}, 0x20) [ 625.241353][ T28] audit: type=1800 audit(1704384038.663:88): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=117 res=0 errno=0 16:00:38 executing program 1: r0 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r0) 16:00:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 16:00:38 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 625.793741][ T28] audit: type=1800 audit(1704384039.213:89): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=119 res=0 errno=0 16:00:39 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 16:00:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002e00010028bd7000fedbdf25000000002f307653f01fb43f3dd1e2389626b5"], 0x2c}}, 0x0) 16:00:39 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:39 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@empty}, @in=@broadcast}}, 0xf0}}, 0x0) [ 626.515150][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 626.532974][ T28] audit: type=1800 audit(1704384039.953:90): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=121 res=0 errno=0 16:00:40 executing program 2: bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000001500)={@map=0x1, 0xffffffffffffffff, 0x7, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 16:00:40 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) [ 626.684296][T10771] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. 16:00:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 16:00:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private0}}) [ 626.910892][ T28] audit: type=1800 audit(1704384040.323:91): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=123 res=0 errno=0 16:00:40 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r1, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) [ 627.154214][ T28] audit: type=1800 audit(1704384040.573:92): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=125 res=0 errno=0 16:00:41 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) 16:00:41 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x63]}, &(0x7f0000000080)={0x0, "3f8d756df534a9b2689bcf051b09eba0085422b857df3499ffae259d1e7db1c0ecd6e10e8a1c3e0aeac2e4cc7c19997dd0b8d8af6e85fc7d389a941b84084c5a", 0x28}, 0x48, 0xfffffffffffffffb) 16:00:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 628.104156][ T28] audit: type=1800 audit(1704384041.513:93): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=127 res=0 errno=0 16:00:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2f, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0xfffffffe, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 16:00:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:41 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x1, &(0x7f0000000000)=@raw=[@alu], 0x0}, 0x90) 16:00:41 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@can, 0x80, 0x0}, 0x2) [ 628.502438][ T28] audit: type=1800 audit(1704384041.923:94): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=129 res=0 errno=0 16:00:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 628.744044][ T28] audit: type=1800 audit(1704384042.163:95): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=131 res=0 errno=0 16:00:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2f, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0xfffffffe, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 16:00:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:43 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@kfunc]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) 16:00:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) 16:00:43 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:43 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 16:00:43 executing program 1: r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) 16:00:43 executing program 2: r0 = inotify_init1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) 16:00:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 629.795592][ T28] audit: type=1800 audit(1704384043.213:96): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=133 res=0 errno=0 [ 629.902707][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.912088][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 16:00:43 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) 16:00:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="8f", 0x1, 0x0, 0x0, 0x0) [ 630.077483][ T28] audit: type=1800 audit(1704384043.493:97): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=135 res=0 errno=0 16:00:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 630.240881][ T28] audit: type=1800 audit(1704384043.663:98): pid=10846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=137 res=0 errno=0 16:00:43 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @initdev}}) 16:00:43 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 16:00:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 630.719940][ T28] audit: type=1800 audit(1704384044.143:99): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=139 res=0 errno=0 16:00:44 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:44 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x2}, 0x48) 16:00:44 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000800)={&(0x7f00000006c0), 0x14, &(0x7f00000007c0)={0x0}}, 0x0) 16:00:44 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:44 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:44 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 631.507176][ T28] audit: type=1800 audit(1704384044.903:100): pid=10863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=141 res=0 errno=0 16:00:45 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f00000000c0)) 16:00:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:45 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0xc0189436, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:45 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x5421, &(0x7f00000000c0)) 16:00:45 executing program 1: r0 = socket(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0xffffffffffffff87) [ 632.080222][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 632.080243][ T28] audit: type=1800 audit(1704384045.503:102): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=145 res=0 errno=0 16:00:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) 16:00:46 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0xe}, 0x48) 16:00:46 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:46 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000800)={&(0x7f00000006c0), 0x14, &(0x7f00000007c0)={&(0x7f0000000700)="4ddc7052b619c26b4b998f2ddff616d1652de277c739f4865bedb761603b275c2bb57b7d38e2d4d2c5b6e394dd55d1687a10860f0c88197786e0dfdde9caf4d950cc1881abf439ea578bb937e0ea3fe20b2c07cfc876439947596af1c6523b305e7f3ff86baf34c00110138a6551247fdf", 0x71}}, 0x0) 16:00:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00', 0x2, 0x0) 16:00:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private2, 0x7}}) 16:00:46 executing program 2: bpf$MAP_CREATE_RINGBUF(0x5, &(0x7f0000000000)={0x9, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60ffffffffff}, 0x48) [ 633.209054][ T28] audit: type=1800 audit(1704384046.623:103): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=147 res=0 errno=0 16:00:46 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:46 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x14}, 0x48) [ 633.531909][ T28] audit: type=1800 audit(1704384046.953:104): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=149 res=0 errno=0 16:00:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:47 executing program 2: bpf$MAP_CREATE_RINGBUF(0x10, &(0x7f0000000000)={0x1b, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, 0x48) 16:00:47 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 634.583784][ T28] audit: type=1800 audit(1704384048.003:105): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=151 res=0 errno=0 16:00:48 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 16:00:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:48 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 16:00:48 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000100)=0x8000, 0x4) [ 634.813200][ T28] audit: type=1800 audit(1704384048.233:106): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=153 res=0 errno=0 16:00:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 16:00:48 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0xb}]}, 0x1c}}, 0x0) [ 635.125806][ T28] audit: type=1800 audit(1704384048.543:107): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=155 res=0 errno=0 [ 635.163412][T10944] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 16:00:49 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:49 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x0, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000)=0x7, 0x4) 16:00:49 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:49 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x6}, 0x48) 16:00:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 636.255554][ T28] audit: type=1800 audit(1704384049.673:108): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=157 res=0 errno=0 16:00:49 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x0, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000030603000000000000000000e2ffffff04"], 0x1c}}, 0x0) [ 636.715286][ T28] audit: type=1800 audit(1704384050.133:109): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=159 res=0 errno=0 16:00:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 637.185405][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:00:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x0, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 638.002564][ T28] audit: type=1800 audit(1704384051.423:110): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=161 res=0 errno=0 16:00:51 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "a64b92"}) 16:00:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:51 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 638.212361][ T28] audit: type=1800 audit(1704384051.623:111): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=163 res=0 errno=0 16:00:51 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:51 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x4020940d, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 638.402791][ T28] audit: type=1800 audit(1704384051.823:112): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=165 res=0 errno=0 16:00:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 638.941481][ T28] audit: type=1800 audit(1704384052.363:113): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=167 res=0 errno=0 16:00:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:52 executing program 2: ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:52 executing program 1: bpf$MAP_CREATE_RINGBUF(0x10, &(0x7f0000000000)={0x1b, 0x4}, 0x48) 16:00:53 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) 16:00:53 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:53 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local}, 0x10) 16:00:53 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) [ 640.386737][ T5104] Bluetooth: hci0: command 0x0401 tx timeout 16:00:53 executing program 1: bpf$MAP_CREATE_RINGBUF(0x5, &(0x7f0000000000)={0x58, 0x740200}, 0x48) [ 640.600733][ T28] audit: type=1800 audit(1704384053.993:114): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=169 res=0 errno=0 16:00:54 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:54 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:54 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) [ 640.872534][ T28] audit: type=1800 audit(1704384054.293:115): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=171 res=0 errno=0 16:00:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:54 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 16:00:54 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 641.248809][ T28] audit: type=1800 audit(1704384054.673:116): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=173 res=0 errno=0 16:00:55 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) 16:00:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, 0x0) 16:00:55 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000040)) 16:00:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, 0x0) 16:00:55 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)) [ 642.498887][ T28] audit: type=1800 audit(1704384055.913:117): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=175 res=0 errno=0 [ 643.130888][ T28] audit: type=1800 audit(1704384056.553:118): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=177 res=0 errno=0 16:00:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5411, 0x0) 16:00:56 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000040)={@remote, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d438c9", 0x1c, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@routing], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:00:56 executing program 2: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)={0x0, 0x2, '\x00', [@enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x20) syz_emit_ethernet(0x1f0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000e86dd658a060000002c"], 0x0) 16:00:57 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) 16:00:57 executing program 2: r0 = timerfd_create(0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) 16:00:57 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:57 executing program 1: socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) clock_settime(0x0, 0x0) 16:00:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:57 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) [ 644.073430][ T28] audit: type=1800 audit(1704384057.493:119): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=179 res=0 errno=0 16:00:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 16:00:57 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:57 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa77c10180c20000000800c5000024"], 0x0) [ 644.742654][ T28] audit: type=1800 audit(1704384058.163:120): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=181 res=0 errno=0 16:00:58 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:58 executing program 1: mq_open(&(0x7f0000000000)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x800, 0x20, 0x0) 16:00:58 executing program 1: mq_open(&(0x7f0000000000)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x800, 0x20, &(0x7f00000000c0)) [ 645.155550][ T28] audit: type=1800 audit(1704384058.563:121): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=183 res=0 errno=0 16:00:59 executing program 3: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, 0x0}, 0x90) 16:00:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:00:59 executing program 2: mq_open(&(0x7f0000000040)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x2, 0x1, &(0x7f0000000080)) 16:00:59 executing program 1: mq_open(&(0x7f0000000540)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x800, 0x35, 0x0) 16:00:59 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:00:59 executing program 1: mq_open(&(0x7f0000000040)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x2, 0x5e, &(0x7f00000000c0)) [ 645.880676][ T28] audit: type=1800 audit(1704384059.293:122): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=185 res=0 errno=0 16:00:59 executing program 2: mq_open(&(0x7f0000000040)='\x89\xdf\x83\xe3c\xbf\x00E\x1b$\x8e\x92\xf6\\\xe4\x02\xed&\x01\xd1+\xe0\xde`\xe9\x95F\xbc{\x87<\x9d\xa0\x8b\xc8q0\xc0\t\n\xf7V;\xc93\xf8', 0x80, 0x164, &(0x7f0000000080)) 16:00:59 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:00:59 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/212) 16:00:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 16:00:59 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 646.316587][ T28] audit: type=1800 audit(1704384059.703:123): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=187 res=0 errno=0 [ 646.497390][ T28] audit: type=1800 audit(1704384059.913:124): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=189 res=0 errno=0 16:01:00 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 16:01:00 executing program 2: ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) 16:01:00 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:00 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 16:01:00 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:00 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_IOCTL(r0, 0x0, 0x0) 16:01:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r0) [ 647.465872][ T28] audit: type=1800 audit(1704384060.853:125): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=191 res=0 errno=0 16:01:00 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000087c0), 0x2, 0x0) 16:01:01 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_0\x00'}) 16:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 16:01:01 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:01:01 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 16:01:01 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) [ 647.974368][ T28] audit: type=1800 audit(1704384061.393:126): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=193 res=0 errno=0 16:01:01 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 16:01:01 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004280), 0x8, 0x0) write$FUSE_ENTRY(r0, 0x0, 0x0) 16:01:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:02 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x31) 16:01:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x200080, 0x70) 16:01:02 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:02 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 16:01:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f00000002c0)) 16:01:02 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 16:01:02 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000004280), 0x8, 0x0) getsockname$packet(r0, 0x0, 0x0) 16:01:02 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 648.851596][ T28] audit: type=1800 audit(1704384062.273:127): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=195 res=0 errno=0 16:01:02 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/power_supply', 0x10000, 0x1d2) 16:01:02 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) [ 649.070544][ T28] audit: type=1800 audit(1704384062.493:128): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=197 res=0 errno=0 16:01:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 16:01:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:03 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x0, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:03 executing program 1: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) 16:01:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 16:01:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, 0x0, 0x0, 0x4000001) 16:01:03 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) 16:01:03 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 650.123701][ T28] audit: type=1800 audit(1704384063.543:129): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=199 res=0 errno=0 16:01:03 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x0, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, 0x0, 0x0) 16:01:04 executing program 1: keyctl$update(0x2, 0x0, &(0x7f0000000000)="d6", 0x1) 16:01:04 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)={@none, 0x5}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2bccd2f42cb6cabdc38a6794e65b8a2b605df64a2caf35b11d4fee20fe", 0x1d}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000480)=[{0x60, 0x104, 0xffffff81, "51bcbf2acf03cdcd32f13ce8f46e94cd99c77426882493e089782b141b9b685cd7093e887d1e3f8bf83c992574aa462c49ad2f644bcfa8b21f44cd71417dac777bd3cd9eddee13d6d615c6e2f744"}, {0x40, 0x10c, 0x2198, "d7d5aa60d29b61f59832fd3e798605e8e4b4de1df3a2673ee0cdd92f55c708303bd97a0174ab05426abd"}, {0xf0, 0x117, 0x2, "c4972ed70a0fbf91f2c25ab2dd9022ec3451fa556a2547add5443497f931c573073993bea1bbef6c9728b0810ce93e32017b83d2be8306aa809dfb9b87392f5c813b61bf4788d8e741a8af29fbca991684bd82b241aca7369b4069c20a485304f40f752c140efb2003e4347c3771f7f8674c780042b2b2236463dcfa2c471ea309f820c61f7ea65541323395b581ab3b40f177266deceb97d1c21670b3202ddd68daeaac4f19ae97784346e15539a4d7097212ab3e0e367ab19e4c46168b97de2451b93f51bcfe3c352fc6c7cc5d5fdc03d39c15804db6d3d42c87"}, {0x50, 0x0, 0x2fb, "4f3c52cc0ef779a3ef57e9eb167d6798d53f32c98d5359d508c99108497445e660020795ad05fdb8f909fa917197b12e9015efa981b18a291290e5"}], 0x1e0}, 0x824) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000740)={0x881a0, 0x6, 0x80, 0xffffff7f, 0x7, 0x4f, 0x6}) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000780), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r0) [ 650.833956][ T28] audit: type=1800 audit(1704384064.253:130): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=201 res=0 errno=0 16:01:04 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 16:01:04 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 16:01:04 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 16:01:04 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x0, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:04 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:04 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 16:01:04 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x424a00, 0x0) 16:01:04 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) [ 651.456512][ T28] audit: type=1800 audit(1704384064.873:131): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=203 res=0 errno=0 16:01:04 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 16:01:05 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 16:01:05 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000003dc0)="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", 0x2000, &(0x7f00000065c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:01:05 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:05 executing program 2: pipe(&(0x7f0000008980)) 16:01:05 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x800) [ 651.961915][ T28] audit: type=1800 audit(1704384065.353:132): pid=11275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=205 res=0 errno=0 16:01:05 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 652.106265][ T28] audit: type=1800 audit(1704384065.503:133): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=207 res=0 errno=0 16:01:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:06 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:06 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 16:01:06 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/devices/virtual', 0x440100, 0x0) 16:01:06 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:06 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, 0x0, 0x0) [ 652.712817][ T28] audit: type=1800 audit(1704384066.133:134): pid=11289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=209 res=0 errno=0 16:01:06 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETATTR(r0, 0x0, 0x0) 16:01:06 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x90240, 0x0) 16:01:06 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:06 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 16:01:06 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400) 16:01:06 executing program 3: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x400) [ 652.918813][ T28] audit: type=1800 audit(1704384066.333:135): pid=11298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=211 res=0 errno=0 16:01:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:07 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 16:01:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:07 executing program 2: pipe(&(0x7f0000008980)={0xffffffffffffffff}) accept$inet6(r0, 0x0, 0x0) 16:01:07 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 16:01:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:07 executing program 2: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 16:01:07 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) 16:01:07 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) [ 653.988340][ T28] audit: type=1800 audit(1704384067.413:136): pid=11322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=213 res=0 errno=0 16:01:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:07 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENT(r0, 0x0, 0x0) 16:01:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 654.157238][ T28] audit: type=1800 audit(1704384067.573:137): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=215 res=0 errno=0 16:01:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:07 executing program 1: pipe(&(0x7f0000008980)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 16:01:07 executing program 3: pipe(&(0x7f0000008980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 16:01:07 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 654.382989][ T28] audit: type=1800 audit(1704384067.793:138): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=217 res=0 errno=0 16:01:08 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) openat$null(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) [ 654.786044][ T28] audit: type=1800 audit(1704384068.203:139): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=219 res=0 errno=0 16:01:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:08 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) epoll_create1(0x0) 16:01:08 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:08 executing program 2: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 16:01:08 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 655.354904][ T28] audit: type=1800 audit(1704384068.773:140): pid=11361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=221 res=0 errno=0 [ 655.430679][ T28] audit: type=1800 audit(1704384068.853:141): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=223 res=0 errno=0 16:01:08 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 655.730844][ T28] audit: type=1800 audit(1704384069.143:142): pid=11374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=225 res=0 errno=0 16:01:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) 16:01:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 655.900010][ T28] audit: type=1800 audit(1704384069.253:143): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=227 res=0 errno=0 [ 655.966011][ T28] audit: type=1800 audit(1704384069.383:144): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=229 res=0 errno=0 16:01:09 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:09 executing program 2: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) [ 656.382919][ T28] audit: type=1800 audit(1704384069.803:145): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=231 res=0 errno=0 16:01:10 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:10 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16:01:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a0a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:10 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:10 executing program 3: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 16:01:10 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16:01:10 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:10 executing program 3: lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0xfffffffffffffd6f, 0x0) 16:01:10 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:10 executing program 3: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) 16:01:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000340)) 16:01:11 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:11 executing program 1: creat(&(0x7f0000002b80)='./file0\x00', 0x8b) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x1200) 16:01:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, &(0x7f0000001980)={0x77359400}) 16:01:11 executing program 2: creat(&(0x7f0000002b80)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x300) 16:01:11 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:11 executing program 2: creat(&(0x7f0000002b80)='./file0\x00', 0x8b) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x100) 16:01:11 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:11 executing program 1: creat(&(0x7f0000002b80)='./file0\x00', 0x8b) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x1100) 16:01:11 executing program 3: r0 = creat(&(0x7f0000002b80)='./file0\x00', 0x0) fchownat(r0, &(0x7f0000000000)='\x00', 0x0, 0xee00, 0x1000) 16:01:11 executing program 1: mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) 16:01:11 executing program 2: mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x806008, 0x0, 0x24832, 0xffffffffffffffff, 0x0) 16:01:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0), 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 16:01:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) 16:01:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000cc0)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2}, 0x0) [ 659.656584][T11452] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? 16:01:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x2e}]}, 0x1c}}, 0x0) 16:01:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x28}, 0x0) [ 659.700676][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 659.700696][ T28] audit: type=1800 audit(1704384073.123:152): pid=11457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=245 res=0 errno=0 16:01:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:13 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) [ 660.273062][ T28] audit: type=1800 audit(1704384073.413:153): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=247 res=0 errno=0 16:01:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01050000000000000000180000000e0001006e657464657673696d000000040002"], 0x64}}, 0x0) 16:01:13 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 660.904566][ T28] audit: type=1800 audit(1704384074.323:154): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=249 res=0 errno=0 16:01:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x45, 0xfc, "3aaf70ad031a62a8137583aa73f94efbafae50726eeb9b8fc57813ca57885164e84e4dad7c0b158b0e9e0cb720facf09f2afb09579c901e2682c702f0ac5b07ff1"}]]}, 0x64}}, 0x0) 16:01:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:01:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000100)) 16:01:14 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 16:01:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote, 0x7800}}) 16:01:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 661.352742][ T28] audit: type=1800 audit(1704384074.773:155): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=251 res=0 errno=0 16:01:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14}, 0xf}}, 0x0) 16:01:14 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:15 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 661.545746][ T28] audit: type=1800 audit(1704384074.963:156): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=253 res=0 errno=0 [ 661.612123][ T28] audit: type=1800 audit(1704384075.033:157): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=255 res=0 errno=0 16:01:16 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:16 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01050000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003e3"], 0x64}}, 0x0) 16:01:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/37, 0x10000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0}, 0x20) 16:01:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$llc(r0, 0x0, &(0x7f00000002c0)) 16:01:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0x5}, 0x20) 16:01:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x0, 0x0, 0xb44}, 0x48) [ 662.641651][ T28] audit: type=1800 audit(1704384076.063:158): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=257 res=0 errno=0 [ 662.664071][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 16:01:16 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:01:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)={0x14, r1, 0x311, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 16:01:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x20, r1, 0x2dcc4bcfab4a6f61, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 663.004917][ T28] audit: type=1800 audit(1704384076.423:159): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=259 res=0 errno=0 16:01:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x0, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:17 executing program 3: socketpair(0x1d, 0x1, 0x5, &(0x7f0000000040)) 16:01:17 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x10000, 0x8) 16:01:17 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x5, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 16:01:17 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f0000000440)="cf", &(0x7f0000000500)=@udp6}, 0x20) 16:01:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x30000}, 0x0) [ 663.957120][ T28] audit: type=1800 audit(1704384077.373:160): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=261 res=0 errno=0 16:01:17 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 664.057392][T11547] can: request_module (can-proto-5) failed. 16:01:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="5d8c2461bff87392eec035b8d7cdb31b28f2490fb9", 0x15}], 0x1}}], 0x1, 0x0) setsockopt$sock_timeval(r0, 0x29, 0x40, &(0x7f0000000040)={0x0, 0xea60}, 0x23) 16:01:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="a7", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="fa886b9b1ba7a4a5b16d8fe4ea743d50524b364bc7c9e1adec4c570ea867a90a39f152302e765b0268546df842e52949ebfcf1eafe1f27c83a67eaefa27174d5416802c9f6f89600c50a5114cd98a1cd62d9c99d7da6c914c075dc052f0266d7b578731d660b1e07d93b258081a9d708540efda13dc13afbccfb671911cff11483d454d5678165f7083fcf5c55f8d2954510ed21a4208fe05e7f50991c1a3bd1209578d52a11ab86e8a449d58870a9c1f053e327814991436a5639928e39bf6820cea0535ddeb251c069b7df200dbe51f81841eb39f974a4de1cb5b695fb351b90d2ce611875e32010044d9dbe", 0xed}, {&(0x7f00000004c0)="ba0ff328bc207ded77d8a1f340d8828eff13a20f839adc068608a760683e327a39cf1d75dbca8fbd2969af484a827c94de19a2c6d9c71d95c5ffb5fd5e24e82b06b1c1deaf260114fe5696d03f7cf5c19cc435cb7d0bbbf0727e3a9cf3b996f3209f73a9743763904be57862befa9148625e95001f173e2b31367358a3e766b350862462", 0x84}], 0x2}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="672315f58ced42028e3c47174e26a4f2743559b5b21046c893292776ad0c639539da9e1c62ddd8b9e37ffd7f65e8ac60bc69f3e56749142f19e02804076d2437496516d5628b54345ca0d2fdf08589b596442eb294060f19ea2bbd8b11e764b69a8c0f2b3d3a69ef520158559f0e7eaedf3a850ce14c2f18230dcf3fdcc162819fe99d7abdbe70ae179661bc577de6acdd90b670a7f4b581bf0c5e55128728868be077", 0xa3}, {&(0x7f0000000680)="89994722ce63ce15b50ca21f74f68d9d7caf3b6b70c7b841f58f892094a14c10d944ba6c61965dc7a96d8cd6638dc0d0ad425e703aeb9ff794139f1aa20cae08c07f100ed007e7d203226c448f6ee47e1544f853d2c9c7b91e1b2cdff4e871f49af0d6fc3cb9d7e9f41cac0e837d34be677bd1abb122e2dee3ce5c237ea3372ea525e136ef013ecaa12994eed8fd404b08de6aa55daca567fdaab7523933625c0ab1f44faca510c25e97b58401098ef87e75d4d04a47345416d49a0fa6edad264e71787f2bdda2501296ed0de5b313a3eeba", 0xd2}, {&(0x7f0000000380)="d8ae93d3a5bc9c58e2241f7b1221004b02fc281a24260075e665ef5219887e86213bbaff5d43ee575aa6f741639981098545ec1c85935145fdd5570824e67eba03a657746fe8d6f86b18a81e4cbd404c652dd3c8cc5d11c9cf3da752072511ccd53d3a48", 0x64}, {&(0x7f0000000200)="e71232556d158024a26494d5e9587048255400ce7ab83cc856fd18aa9f9a25b90f3c97b092006b2ec8a968", 0x2b}, {&(0x7f0000000780)="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", 0x289}], 0x5}}], 0x2, 0x0) [ 664.270311][ T28] audit: type=1800 audit(1704384077.683:161): pid=11561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=263 res=0 errno=0 16:01:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x0, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:18 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x0], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x33fe0}}, 0x0) 16:01:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250a00000014000280080009000600000008000500ff03000030000180060004004e2100000800090044000000140003000a010101000000000004000000000000080008000900000008000500050000001400028005000d000100000005000d00010000e7070006"], 0xb0}}, 0x0) 16:01:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000540)=ANY=[@ANYRES32=r1], 0x8) 16:01:18 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x0], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 665.386038][ T28] audit: type=1800 audit(1704384078.803:162): pid=11570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=265 res=0 errno=0 [ 665.407646][T11577] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 16:01:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 16:01:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01050000000000000000180000000e0001006e657464657673696d0000000f0002006e657464657673696d3078"], 0x64}}, 0x0) 16:01:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x101}, 0x14}}, 0x0) 16:01:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x8) 16:01:19 executing program 2: mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x24832, 0xffffffffffffffff, 0x0) [ 665.754265][ T28] audit: type=1800 audit(1704384079.163:163): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=267 res=0 errno=0 [ 665.936734][T11594] nbd: must specify at least one socket 16:01:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x0, 0x70bd27, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:20 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x0], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:20 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$ax25(r0, &(0x7f00000000c0)={{0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0xf) 16:01:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 16:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xbd, r1, 0x501, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5, 0x12, 0x3}, {0x6}, {0x8}}]}, 0xffb9}}, 0x0) 16:01:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xb, &(0x7f00000000c0)={&(0x7f00000002c0)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x0, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DST={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x74}}, 0x0) 16:01:20 executing program 1: mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x0, 0x24832, 0xffffffffffffffff, 0x0) 16:01:20 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 666.678890][ T28] audit: type=1800 audit(1704384080.093:164): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=269 res=0 errno=0 16:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) 16:01:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8916, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2}}) 16:01:20 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/mnt\x00') [ 667.198200][ T28] audit: type=1800 audit(1704384080.623:165): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=271 res=0 errno=0 16:01:21 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 16:01:21 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000040)=@base={0x15, 0x800}, 0x48) 16:01:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:21 executing program 2: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 16:01:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89a1, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 16:01:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000e7ffff2affffff01"], 0x14}}, 0x0) 16:01:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) [ 668.178686][ T28] audit: type=1800 audit(1704384081.603:166): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=273 res=0 errno=0 16:01:21 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:21 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$ax25(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 16:01:21 executing program 3: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) r0 = epoll_create(0x42) r1 = socket$can_j1939(0x1d, 0x2, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000000)={0x50002000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x81, 0x4, 0x18, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x20, 0x700, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', r6, 0x0, 0x81, 0x7, 0x4, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x8, 0xfffffe00, 0xba0a}}) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000300)=0xf715, &(0x7f0000000340)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000028c0)={'vxcan1\x00', 0x0}) r9 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000ac0)=""/4096, 0x10000, 0x0, 0xffffffff, 0x3}, 0x20) write$bt_hci(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x0, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x80, 0xb9, 0x7f}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', r10, 0x4, 0x7f, 0x9, 0xdcb, 0x42, @remote, @local, 0x7, 0x7800, 0xba46, 0x50f9}}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r16, 0x89f1, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r17, 0x29, 0x0, 0x8, 0xc31, 0x0, @private0, @empty, 0x7, 0x8000, 0xff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r15, 0x89f2, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl0\x00', r17, 0x4, 0x40, 0x0, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x20, 0x80, 0xb9, 0x7f}}) getsockname$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000006c0)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x0, 0x10, 0x6, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000041}, 0xc801) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), 0x4) 16:01:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 668.594177][ T28] audit: type=1800 audit(1704384082.013:167): pid=11650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=275 res=0 errno=0 16:01:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x25dfdbfe, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:22 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000cc0)={0x2, 0x0, @dev}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) 16:01:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x40}}, 0x0) 16:01:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:22 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x0, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:22 executing program 3: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x24832, 0xffffffffffffffff, 0x0) 16:01:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) [ 669.433165][T11663] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 669.453246][T11668] netlink: 'syz-executor.2': attribute type 41 has an invalid length. [ 669.475597][T11668] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 669.484059][ T28] audit: type=1800 audit(1704384082.893:168): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=277 res=0 errno=0 16:01:22 executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 16:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000028c0)={'vxcan1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 16:01:23 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x0, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:23 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/37, 0x13f00, 0x800, 0x0, 0x3}, 0x20) 16:01:23 executing program 1: pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x3}, &(0x7f0000000240), 0x0) [ 670.100299][ T28] audit: type=1800 audit(1704384083.363:169): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=279 res=0 errno=0 16:01:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x0, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x400, 0x4) 16:01:24 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0x0, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:24 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80000222) 16:01:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) 16:01:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:24 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$ax25(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4000}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 16:01:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14}, 0x33fe0}}, 0x0) 16:01:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) [ 670.780836][ T28] audit: type=1800 audit(1704384084.203:170): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=281 res=0 errno=0 16:01:24 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$ax25(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4000}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 16:01:24 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) [ 671.290602][ T28] audit: type=1800 audit(1704384084.643:171): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=283 res=0 errno=0 16:01:25 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:25 executing program 2: mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800009, 0x0, 0x24832, 0xffffffffffffffff, 0x0) 16:01:25 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x0, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) 16:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) [ 672.089606][ T28] audit: type=1800 audit(1704384085.513:172): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=285 res=0 errno=0 16:01:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 16:01:25 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:25 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 16:01:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) [ 672.456721][ T28] audit: type=1800 audit(1704384085.853:173): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=287 res=0 errno=0 16:01:26 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x0, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) 16:01:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1}}) [ 672.901467][ T28] audit: type=1800 audit(1704384086.323:174): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=289 res=0 errno=0 16:01:27 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x0, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) 16:01:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x0, {0x20}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:27 executing program 2: mmap$xdp(&(0x7f0000c8b000/0x1000)=nil, 0x7ffffffff000, 0x0, 0xfb, 0xffffffffffffffff, 0x0) 16:01:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 673.863314][ T28] audit: type=1800 audit(1704384087.283:175): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=291 res=0 errno=0 16:01:27 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x0, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x12}, 0x0) [ 674.135401][ T28] audit: type=1800 audit(1704384087.553:176): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=293 res=0 errno=0 16:01:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:27 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:27 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) [ 674.437708][ T28] audit: type=1800 audit(1704384087.863:177): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=295 res=0 errno=0 16:01:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:27 executing program 2: mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4024031, 0xffffffffffffffff, 0x0) 16:01:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x3b, 0x200, 0x0, 0x25dfdbfe, {}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4f, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:28 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 16:01:28 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:28 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:28 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) 16:01:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) [ 675.380771][ T28] audit: type=1800 audit(1704384088.803:178): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=297 res=0 errno=0 16:01:28 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:28 executing program 2: mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x24832, 0xffffffffffffffff, 0x0) 16:01:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, @private2, @private1}}) [ 675.795930][ T28] audit: type=1800 audit(1704384089.213:179): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=299 res=0 errno=0 16:01:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3b, 0x200, 0x0, 0x25dfdbfe, {}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:29 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x0, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:29 executing program 2: socketpair(0x25, 0x5, 0x0, &(0x7f0000000600)) 16:01:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 16:01:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 676.639680][ T28] audit: type=1800 audit(1704384090.063:180): pid=11831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=301 res=0 errno=0 16:01:30 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x0, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:01:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 676.985900][ T28] audit: type=1800 audit(1704384090.403:181): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=303 res=0 errno=0 16:01:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x11, &(0x7f0000000340)="0180f82d", 0x4) 16:01:31 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3b, 0x200, 0x0, 0x25dfdbfe, {}, [@typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 16:01:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x0, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 16:01:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:31 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r0, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="00010000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x0, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x74000600, &(0x7f0000000480)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x0, 0x8848, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 16:01:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', 0x0}) [ 677.986160][ T28] audit: type=1800 audit(1704384091.403:182): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=305 res=0 errno=0 16:01:31 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 678.188280][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 16:01:32 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r0, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) [ 678.557924][ T28] audit: type=1800 audit(1704384091.983:183): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=307 res=0 errno=0 16:01:32 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 678.855362][T11870] bond1: entered promiscuous mode [ 678.954516][ T28] audit: type=1800 audit(1704384092.373:184): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=309 res=0 errno=0 [ 679.014588][T11877] vlan2: entered promiscuous mode [ 679.033556][T11877] vlan2: entered allmulticast mode [ 679.057695][T11877] bond1: entered allmulticast mode [ 679.094032][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 679.124687][T11881] bond1 (unregistering): left allmulticast mode [ 679.169569][T11881] bond1 (unregistering): Released all slaves 16:01:32 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:32 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r0, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 16:01:32 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 16:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1}}) [ 679.599570][ T28] audit: type=1800 audit(1704384093.023:185): pid=11890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=311 res=0 errno=0 16:01:33 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x0, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) 16:01:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) [ 679.869416][ T28] audit: type=1800 audit(1704384093.283:186): pid=11903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=313 res=0 errno=0 16:01:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x6}]}, 0x18}}, 0x0) [ 680.047980][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 16:01:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:34 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x0, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:34 executing program 2: bpf$MAP_CREATE(0x5, &(0x7f0000000040)=@base={0x0, 0x800, 0x1ffff000}, 0x48) 16:01:34 executing program 3: socketpair(0x2, 0xa, 0x0, &(0x7f00000002c0)) 16:01:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf10"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:34 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x0, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 680.995467][ T28] audit: type=1800 audit(1704384094.403:187): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=315 res=0 errno=0 16:01:34 executing program 3: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 16:01:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'ip_vti0\x00'}) 16:01:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@mark={{0x14}}], 0x18}, 0x0) [ 681.214543][ T28] audit: type=1800 audit(1704384094.633:188): pid=11931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=317 res=0 errno=0 16:01:35 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x74, 0x0, 0x5}, 0x48) 16:01:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)={0x14, r1, 0x311, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 16:01:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 16:01:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20}, 0x0) [ 682.377983][ T28] audit: type=1800 audit(1704384095.803:189): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=319 res=0 errno=0 16:01:35 executing program 3: bpf$BPF_GET_MAP_INFO(0x1d, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 16:01:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:35 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:35 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) 16:01:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 16:01:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00'}) 16:01:36 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@map}, 0x20) [ 682.806385][ T28] audit: type=1800 audit(1704384096.223:190): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=321 res=0 errno=0 16:01:36 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:36 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000d00), 0x10) 16:01:36 executing program 2: socketpair(0x0, 0x5, 0x7, 0x0) gettid() gettid() openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) socketpair(0x0, 0x0, 0x9a, &(0x7f0000001580)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/time\x00') syz_clone(0x41006000, 0x0, 0x0, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)="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") bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002c00)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000002c40)=r0) 16:01:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 683.720294][ T28] audit: type=1800 audit(1704384097.133:191): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=323 res=0 errno=0 16:01:37 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x0, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:37 executing program 3: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={0x0}, 0x18) 16:01:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) [ 684.484800][ T28] audit: type=1800 audit(1704384097.643:192): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=325 res=0 errno=0 16:01:38 executing program 3: r0 = socket$inet6(0x1c, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f0000000000)="99", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 16:01:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:38 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x0, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf102463"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 16:01:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x8) 16:01:38 executing program 2: r0 = socket$inet6(0x1c, 0x5, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 685.371359][ T28] audit: type=1800 audit(1704384098.793:193): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=327 res=0 errno=0 16:01:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept(r0, 0x0, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf4017327c", 0xfffffffffffffdcb, 0x0, 0x0, 0xcb) 16:01:38 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x0, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x200, 0x0) 16:01:39 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 685.603652][ T28] audit: type=1800 audit(1704384099.023:194): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=329 res=0 errno=0 16:01:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 16:01:39 executing program 2: r0 = socket$inet6(0x1c, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) [ 685.736134][ T28] audit: type=1800 audit(1704384099.153:195): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=331 res=0 errno=0 16:01:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 16:01:40 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) 16:01:40 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:40 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 16:01:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 16:01:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:40 executing program 2: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/class/net', 0x0, 0x0) dup2(r2, r1) 16:01:40 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = signalfd(r0, &(0x7f0000000080), 0x8) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 16:01:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) dup(r0) 16:01:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) [ 687.007951][ T28] audit: type=1800 audit(1704384100.433:196): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=333 res=0 errno=0 16:01:40 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:40 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000140)=""/13) [ 687.155233][ T28] audit: type=1800 audit(1704384100.573:197): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=335 res=0 errno=0 16:01:40 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/class/net', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 16:01:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 16:01:41 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$can_j1939(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x140) 16:01:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 16:01:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:01:41 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 688.179071][ T28] audit: type=1800 audit(1704384101.593:198): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=337 res=0 errno=0 16:01:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) 16:01:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 16:01:41 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000140)=0x5f) 16:01:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x1e) [ 688.394241][ T28] audit: type=1800 audit(1704384101.813:199): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=339 res=0 errno=0 16:01:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3", 0xc, 0x0, 0x0, 0x0) 16:01:41 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffea4) 16:01:41 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:42 executing program 3: setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 16:01:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3", 0xc, 0x0, 0x0, 0x0) [ 688.731292][ T28] audit: type=1800 audit(1704384102.113:200): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=341 res=0 errno=0 16:01:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:42 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:01:42 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], 0x0, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:42 executing program 2: renameat2(0xffffffffffffffff, &(0x7f0000002100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 16:01:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept$inet6(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6e617400000000000000000000000000000040000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000017332b632746203ec4539d46cfa19b9d24c7f2ec701d70412d980000000000000000b670e97aea199ad45eac919acf2a01b1c5af903accbc08d87865fd45aa08583c478a77"], 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) pipe2$watch_queue(0x0, 0xb82e336200000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x5452, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x3, 0x3, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) accept$inet(r3, 0x0, &(0x7f0000000040)=0xffffffe1) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20102, 0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000100)={'team_slave_1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) getsockname(0xffffffffffffffff, 0x0, 0x0) 16:01:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3", 0xc, 0x0, 0x0, 0x0) 16:01:42 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005140), 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 16:01:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816af", 0x12, 0x0, 0x0, 0x0) 16:01:43 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005140), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000005140), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001740)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 689.558537][ T28] audit: type=1800 audit(1704384102.983:201): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=343 res=0 errno=0 16:01:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], 0x0, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 689.705032][ T28] audit: type=1800 audit(1704384103.123:202): pid=12138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=345 res=0 errno=0 16:01:43 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], 0x0, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816af", 0x12, 0x0, 0x0, 0x0) [ 689.885995][ T28] audit: type=1800 audit(1704384103.233:203): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=347 res=0 errno=0 16:01:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a9224b4bf1024633a0a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:44 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB]) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3b, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:01:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000005140), 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 16:01:44 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140), 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816af", 0x12, 0x0, 0x0, 0x0) 16:01:44 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 16:01:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1000000}]}, 0x24}}, 0x0) 16:01:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf40", 0x15, 0x0, 0x0, 0x0) 16:01:44 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140), 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 690.776334][ T28] audit: type=1800 audit(1704384104.193:204): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=349 res=0 errno=0 16:01:44 executing program 3: bpf$BPF_PROG_DETACH(0x6, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x2004, 0x0, @link_id}, 0x20) 16:01:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf40", 0x15, 0x0, 0x0, 0x0) [ 690.923719][ T28] audit: type=1800 audit(1704384104.343:205): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=351 res=0 errno=0 16:01:44 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140), 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 691.462414][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.468905][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 16:01:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000380)) 16:01:45 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x3, 0x0, 0x0) 16:01:45 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf40", 0x15, 0x0, 0x0, 0x0) 16:01:45 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 16:01:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf401732", 0x17, 0x0, 0x0, 0x0) 16:01:45 executing program 2: pipe2(&(0x7f00000000c0), 0x80080) 16:01:45 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x800) syz_usbip_server_init(0x5) 16:01:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:45 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) [ 692.138566][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 692.138588][ T28] audit: type=1800 audit(1704384105.563:207): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=355 res=0 errno=0 16:01:45 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf401732", 0x17, 0x0, 0x0, 0x0) 16:01:45 executing program 2: r0 = syz_io_uring_setup(0x37c4, &(0x7f0000001140), &(0x7f00000011c0), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_FILES2(r0, 0x8, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 692.363256][T12198] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 692.369890][T12198] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 692.385265][ T28] audit: type=1800 audit(1704384105.803:208): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=357 res=0 errno=0 16:01:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0xf, &(0x7f0000000340)=@ringbuf, 0x0}, 0x90) [ 692.410299][T12198] vhci_hcd vhci_hcd.0: Device attached 16:01:45 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000100)="df49f9d49c7f4c52fd992df3fbce33e816afeaaf401732", 0x17, 0x0, 0x0, 0x0) [ 692.451926][T12200] vhci_hcd: connection closed [ 692.476805][ T6281] vhci_hcd: stop threads [ 692.511211][ T6281] vhci_hcd: release socket [ 692.515687][ T6281] vhci_hcd: disconnect device 16:01:46 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x3f04, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x600000000000000) 16:01:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000fc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 16:01:46 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xc1, 0x8e, 0x29, 0x20, 0x5032, 0xbc7, 0x6728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xf6, 0x2b}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x201, 0x58, 0x40, 0x5, 0x40, 0x6}, 0x2e, &(0x7f0000001a80)={0x5, 0xf, 0x2e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x2, 0xff15}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x9, 0xa847}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x0, 0x7, 0x8000, 0xc1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xd4, 0x4, 0xfffd}]}, 0x1, [{0xb8, &(0x7f0000001ac0)=@string={0xb8, 0x3, "5aa1d9052f3a164868577b7765ff239ab8915c2ff68e7597cf2be4dbda9dcf9a7c0cb735cd55cfed6271d537f8a3d740b9f4f91c23c4056078390c2f4bd9ff74084d48e22a24adccaae2ea55b7cc99819fec0bc99168315d253a5868daadaed7d76064b3caaa97811c42e0e551210995711d8592dfeb29f0571477fe00eb23bcc2fa76f6c0fccef35c0ef3453b8587c38e1337b6bc96bd6e821756ceb0a455cca50d251b4259c75a196402b7790596b0cd810edde3f6"}}]}) [ 692.662285][ T28] audit: type=1800 audit(1704384106.083:209): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=359 res=0 errno=0 16:01:46 executing program 3: memfd_create(&(0x7f0000000c80)='--\x00', 0x3) 16:01:46 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, 0xfffffffffffffffb) 16:01:46 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xc1, 0x8e, 0x29, 0x20, 0x5032, 0xbc7, 0x6728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0xfd, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x3, 0xa7, 0xf6, 0x2b, 0x0, [], [{}, {}, {{0x9, 0x5, 0x0, 0x0, 0x20}}]}}]}}]}}, 0x0) 16:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:46 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 693.024029][ T28] audit: type=1800 audit(1704384106.443:210): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=361 res=0 errno=0 [ 693.049953][ T5060] usb 2-1: new high-speed USB device number 7 using dummy_hcd 16:01:46 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) 16:01:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12031000c0fc020002004788800809103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 16:01:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:46 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) socket$vsock_stream(0x28, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 693.153641][ T28] audit: type=1800 audit(1704384106.563:211): pid=12231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=363 res=0 errno=0 16:01:46 executing program 3: pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$can_j1939(r0, &(0x7f0000000200), 0x18) [ 693.288935][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 693.309172][ T28] audit: type=1800 audit(1704384106.733:212): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=365 res=0 errno=0 [ 693.332136][ T5060] usb 2-1: Using ep0 maxpacket: 32 [ 693.566836][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 693.626815][ T5060] usb 2-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=67.28 [ 693.636056][ T5060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.648483][ T5060] usb 2-1: Product: syz [ 693.652696][ T5060] usb 2-1: Manufacturer: syz [ 693.657494][ T5060] usb 2-1: SerialNumber: syz [ 693.664347][ T5060] usb 2-1: config 0 descriptor?? [ 693.696820][ T9] usb 3-1: config 253 has an invalid interface number: 179 but max is 0 [ 693.707270][ T9] usb 3-1: config 253 has no interface number 0 [ 693.709648][ T5060] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 693.714339][ T9] usb 3-1: config 253 interface 179 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 693.721473][ T5060] dvb-usb: bulk message failed: -22 (3/0) [ 693.734919][ T9] usb 3-1: config 253 interface 179 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 693.743303][ T5060] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 693.752195][ T9] usb 3-1: config 253 interface 179 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 693.789103][ T5060] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 693.797425][ T5060] usb 2-1: media controller created [ 693.827806][ T5060] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.853398][ T5060] dvb-usb: bulk message failed: -22 (6/0) [ 693.859736][ T5060] dvb-usb: bulk message failed: -22 (6/0) [ 693.865598][ T5060] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 693.924058][ T5060] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 693.936905][ T9] usb 3-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=67.28 [ 693.939057][ T5060] dvb-usb: schedule remote query interval to 150 msecs. [ 693.947217][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.957950][ T5060] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 693.961129][ T9] usb 3-1: Product: syz [ 693.975622][ T9] usb 3-1: Manufacturer: syz [ 693.978861][ T5060] usb 2-1: USB disconnect, device number 7 [ 693.980634][ T9] usb 3-1: SerialNumber: syz [ 694.049663][ T9] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 694.066255][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 694.077526][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 694.079221][ T5060] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 694.111191][ T9] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 694.124240][ T9] usb 3-1: media controller created [ 694.158880][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.183800][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 694.189869][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 694.196779][ T9] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 694.240869][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 694.263374][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 694.271955][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 694.283998][ T9] usb 3-1: USB disconnect, device number 83 [ 694.373472][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. 16:01:47 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xc1, 0x8e, 0x29, 0x20, 0x5032, 0xbc7, 0x6728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xf6, 0x2b}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x201, 0x58, 0x40, 0x5, 0x40, 0x6}, 0x2e, &(0x7f0000001a80)={0x5, 0xf, 0x2e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x2, 0xff15}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x9, 0xa847}, @wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x0, 0x7, 0x8000, 0xc1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xd4, 0x4, 0xfffd}]}, 0x1, [{0xb8, &(0x7f0000001ac0)=@string={0xb8, 0x3, "5aa1d9052f3a164868577b7765ff239ab8915c2ff68e7597cf2be4dbda9dcf9a7c0cb735cd55cfed6271d537f8a3d740b9f4f91c23c4056078390c2f4bd9ff74084d48e22a24adccaae2ea55b7cc99819fec0bc99168315d253a5868daadaed7d76064b3caaa97811c42e0e551210995711d8592dfeb29f0571477fe00eb23bcc2fa76f6c0fccef35c0ef3453b8587c38e1337b6bc96bd6e821756ceb0a455cca50d251b4259c75a196402b7790596b0cd810edde3f6"}}]}) 16:01:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:47 executing program 0: memfd_create(&(0x7f0000000240)='+@)::}\x00', 0x0) 16:01:47 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xc1, 0x8e, 0x29, 0x20, 0x5032, 0xbc7, 0x6728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfd, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xcf, 0x48, 0x3b, 0x0, [], [{}]}}]}}]}}, 0x0) 16:01:48 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:48 executing program 2: syz_usb_connect(0x0, 0x3f, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xc1, 0x8e, 0x29, 0x20, 0x5032, 0xbc7, 0x6728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x2, 0xcf, 0x48, 0x3b, 0x4, [], [{}, {}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xf6, 0x2b}}]}}]}}, 0x0) 16:01:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 694.766507][ T1139] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 694.822140][ T5152] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 694.872967][ T28] audit: type=1800 audit(1704384108.293:213): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=367 res=0 errno=0 16:01:48 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:48 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 695.000422][ T28] audit: type=1800 audit(1704384108.423:214): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=369 res=0 errno=0 16:01:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 695.058495][ T1139] usb 4-1: Using ep0 maxpacket: 32 [ 695.077328][ T5152] usb 2-1: Using ep0 maxpacket: 32 [ 695.144599][ T28] audit: type=1800 audit(1704384108.563:215): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=371 res=0 errno=0 [ 695.200082][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 695.237097][ T1139] usb 4-1: config 253 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 695.408341][ T1139] usb 4-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=67.28 [ 695.421580][ T5152] usb 2-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=67.28 [ 695.431041][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.439141][ T1139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.447373][ T5152] usb 2-1: Product: syz [ 695.451754][ T5152] usb 2-1: Manufacturer: syz [ 695.456488][ T1139] usb 4-1: Product: syz [ 695.460675][ T1139] usb 4-1: Manufacturer: syz [ 695.465282][ T1139] usb 4-1: SerialNumber: syz [ 695.469954][ T5152] usb 2-1: SerialNumber: syz [ 695.486503][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 695.493192][ T5152] usb 2-1: config 0 descriptor?? [ 695.533602][ T1139] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 695.541682][ T1139] dvb-usb: bulk message failed: -22 (3/0) [ 695.550610][ T5152] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 695.560593][ T5152] dvb-usb: bulk message failed: -22 (3/0) [ 695.568408][ T1139] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 695.592831][ T5152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 695.603124][ T1139] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 695.611440][ T1139] usb 4-1: media controller created [ 695.617100][ T9] usb 3-1: config 0 has an invalid interface number: 84 but max is 1 [ 695.637334][ T5152] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 695.645578][ T5152] usb 2-1: media controller created [ 695.651574][ T9] usb 3-1: config 0 has no interface number 1 [ 695.666486][ T9] usb 3-1: config 0 interface 84 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 695.696771][ T9] usb 3-1: config 0 interface 84 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 695.707942][ T1139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.740760][ T5152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.780616][ T1139] dvb-usb: bulk message failed: -22 (6/0) [ 695.796738][ T1139] dvb-usb: bulk message failed: -22 (6/0) [ 695.802810][ T1139] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 695.818795][ T5152] dvb-usb: bulk message failed: -22 (6/0) [ 695.824892][ T5152] dvb-usb: bulk message failed: -22 (6/0) [ 695.832337][ T5152] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 695.859454][ T1139] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 695.879074][ T1139] dvb-usb: schedule remote query interval to 150 msecs. [ 695.886085][ T1139] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 695.899037][ T5152] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 695.910816][ T9] usb 3-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=67.28 [ 695.927074][ T1139] usb 4-1: USB disconnect, device number 3 [ 695.934863][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.943302][ T9] usb 3-1: Product: syz [ 695.950245][ T9] usb 3-1: Manufacturer: syz [ 695.954904][ T9] usb 3-1: SerialNumber: syz [ 695.963323][ T5152] dvb-usb: schedule remote query interval to 150 msecs. [ 695.988244][ T9] usb 3-1: config 0 descriptor?? [ 695.993281][ T5152] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 696.018569][ T5152] usb 2-1: USB disconnect, device number 8 [ 696.055377][ T1139] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 696.147384][ T5152] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. 16:01:49 executing program 1: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000b80)=@o_path={0x0}, 0x18) 16:01:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:49 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0), 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:49 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) [ 696.279060][ T9] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 696.291790][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 696.304774][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.344086][ T9] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 696.362548][ T9] usb 3-1: media controller created 16:01:49 executing program 1: bpf$OBJ_GET_PROG(0xe, 0x0, 0x0) [ 696.414773][ T28] audit: type=1800 audit(1704384109.833:216): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=373 res=0 errno=0 [ 696.483672][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.574042][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 696.581262][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 696.599945][ T9] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 696.656913][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 696.686314][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 696.701218][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. 16:01:50 executing program 2: bpf$OBJ_GET_PROG(0x23, &(0x7f0000000b80)=@o_path={0x0}, 0x18) 16:01:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:50 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0), 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x110, 0x1a, 0x0, 0x1, [@AF_INET={0x13, 0x18, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x8, 0x3, 0x0, 0x1, [{0x30, 0x2, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x4, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) 16:01:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 696.730306][ T9] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 696.740999][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 696.761174][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.818664][ T9] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 696.857963][ T1139] dvb-usb: bulk message failed: -22 (1/0) [ 696.863787][ T1139] dvb-usb: error while querying for an remote control event. [ 696.874065][ T9] usb 3-1: media controller created [ 696.885284][T12287] netlink: 'syz-executor.1': attribute type 25 has an invalid length. 16:01:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:50 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0), 0x0, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 696.933595][T12287] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 16:01:50 executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 16:01:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14}, 0x14}}, 0x20004890) [ 697.021655][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 16:01:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x2404c004) [ 697.091903][ T1139] dvb-usb: bulk message failed: -22 (1/0) [ 697.122318][ T1139] dvb-usb: error while querying for an remote control event. [ 697.173083][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 697.204963][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 697.235183][ T9] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 697.305290][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 697.327979][ T1139] dvb-usb: bulk message failed: -22 (1/0) [ 697.333785][ T1139] dvb-usb: error while querying for an remote control event. [ 697.371858][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 697.389810][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 697.441614][ T9] usb 3-1: USB disconnect, device number 84 [ 697.525396][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. 16:01:51 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 16:01:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:51 executing program 1: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) 16:01:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:51 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 16:01:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8f"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 697.587143][ T9] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. 16:01:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f00000000c0)=@framed, 0x0}, 0x90) [ 697.745428][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 697.745450][ T28] audit: type=1800 audit(1704384111.163:219): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=379 res=0 errno=0 16:01:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:51 executing program 2: syz_clone(0x0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000300), 0x0) 16:01:51 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) 16:01:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 698.089258][ T28] audit: type=1800 audit(1704384111.513:220): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=381 res=0 errno=0 16:01:52 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 16:01:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) 16:01:52 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x1000, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:52 executing program 2: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000000)={0x0, 0x1008}}, @devid}) 16:01:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) [ 698.867641][ T28] audit: type=1800 audit(1704384112.283:221): pid=12341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=383 res=0 errno=0 16:01:52 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:52 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:52 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) [ 699.144748][ T28] audit: type=1800 audit(1704384112.563:222): pid=12350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=385 res=0 errno=0 16:01:52 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) [ 699.348866][ T28] audit: type=1800 audit(1704384112.773:223): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=387 res=0 errno=0 16:01:53 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffe]}, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000800)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 16:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) 16:01:53 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 699.953711][T12340] loop2: detected capacity change from 0 to 32768 [ 700.074210][T12340] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12340) [ 700.139444][T12340] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 700.178014][T12340] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 700.219850][T12340] BTRFS info (device loop2): disk space caching is enabled [ 700.328407][T12340] BTRFS info (device loop2): rebuilding free space tree [ 700.373046][T12340] BTRFS info (device loop2): disabling free space tree [ 700.388127][T12340] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 700.412051][T12340] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) 16:01:53 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x0, 0x0) pidfd_getfd(r0, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:53 executing program 2: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000000)={0x0, 0x1008}}, @devid}) 16:01:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) [ 700.441952][T12340] BTRFS info (device loop2): checking UUID tree 16:01:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 700.512498][ T5096] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 700.520078][ T28] audit: type=1800 audit(1704384113.933:224): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=389 res=0 errno=0 16:01:54 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) [ 700.787047][ T28] audit: type=1800 audit(1704384114.193:225): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=391 res=0 errno=0 16:01:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161381, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="63924ebd057b5fefa9a28c7e4b11078ec910d3ab4f1b1cfa0045e6a01818bbc39d20bd5be7293145d37586de3f49db0f629b196ed5ceb146e6ef215a5d1dc467600b41132ee44e64316e2bd55b9ac6afa03b1c54304eeb91935c9059715094fe7555eb8970cd0b443bd3e9eb3afd8faebea0c67209d06f7246d287e39b68089a42e9b0b2f487b8dda6047a"], 0x48, 0x80}, 0x80) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xff, 0x0, 0xfffffffc, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541b, &(0x7f0000000800)={0x0, 0x2, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 16:01:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:54 executing program 4: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000da5000/0x1000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bcachefs', 0x20002, 0x6) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000cfb000/0x3000)=nil, 0x2000) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x55595659, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)='\x00') move_pages(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0xfff, 0x2, 0x5, 0x6, 0x6f89, 0xff, 0x928], &(0x7f0000000140)=[0x0], 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0xb}], 0x1, 0x1000, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) mbind(&(0x7f0000add000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000200)=0x7, 0x1, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="010008d1a06f000426440acfb6d76c5be7beff7ffb0f0000000000403aa109000000000000000249050f018a5737b5"], 0x208e24b) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 16:01:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x8}, 0x90) 16:01:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)='\a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 16:01:54 executing program 3: pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=@bridge_newvlan={0x18}, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050008004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f7700000000400002003c000b800800010006000000300002802c00010000ff", @ANYRES64=r3], 0x70}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 701.349690][ T28] audit: type=1800 audit(1704384114.773:226): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=393 res=0 errno=0 [ 701.564953][T12397] loop2: detected capacity change from 0 to 32768 [ 701.572883][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 701.592039][T12397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12397) [ 701.618657][T12397] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 701.643163][T12397] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 701.658115][T12397] BTRFS info (device loop2): disk space caching is enabled [ 701.674191][T12415] general protection fault, probably for non-canonical address 0xdffffc0000002009: 0000 [#1] PREEMPT SMP KASAN [ 701.685983][T12415] KASAN: probably user-memory-access in range [0x0000000000010048-0x000000000001004f] [ 701.695568][T12415] CPU: 0 PID: 12415 Comm: syz-executor.3 Not tainted 6.7.0-rc8-next-20240104-syzkaller #0 [ 701.705516][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 701.715628][T12415] RIP: 0010:hfsc_tcf_block+0x3f/0x70 [ 701.720992][T12415] Code: de e8 25 8d e4 f8 48 85 db 74 2c e8 8b 91 e4 f8 e8 86 91 e4 f8 48 8d 7b 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 15 48 8b 43 58 5b 5d c3 e8 5f 91 e4 f8 48 8d 9d d0 [ 701.740673][T12415] RSP: 0018:ffffc90015ba72f8 EFLAGS: 00010206 [ 701.746775][T12415] RAX: dffffc0000000000 RBX: 000000000000fff2 RCX: ffffc9000a289000 [ 701.754769][T12415] RDX: 0000000000002009 RSI: ffffffff88a3922a RDI: 000000000001004a [ 701.762800][T12415] RBP: ffff88803c0da000 R08: 0000000000000007 R09: 0000000000000000 [ 701.770813][T12415] R10: 000000000000fff2 R11: ffffffff8898d569 R12: ffff888037194000 [ 701.778828][T12415] R13: ffffffff8beeb540 R14: 0000000000000002 R15: ffffffff8f3b84e0 [ 701.786828][T12415] FS: 00007f7e756456c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 701.795790][T12415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.802403][T12415] CR2: 0000000020000080 CR3: 000000001e552000 CR4: 00000000003506f0 [ 701.810396][T12415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 701.818387][T12415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 701.826377][T12415] Call Trace: [ 701.829675][T12415] [ 701.832623][T12415] ? show_regs+0x8e/0xa0 [ 701.836905][T12415] ? die_addr+0x4f/0xd0 [ 701.841096][T12415] ? exc_general_protection+0x155/0x230 [ 701.846696][T12415] ? asm_exc_general_protection+0x26/0x30 [ 701.852445][T12415] ? qdisc_alloc+0x789/0xa90 [ 701.857065][T12415] ? hfsc_tcf_block+0x2a/0x70 [ 701.861777][T12415] ? hfsc_tcf_block+0x3f/0x70 [ 701.866489][T12415] ? hfsc_tcf_block+0x2a/0x70 [ 701.871200][T12415] qdisc_create+0x6c0/0x1440 [ 701.875844][T12415] ? rcu_is_watching+0x12/0xb0 [ 701.880643][T12415] ? tc_get_qdisc+0xc20/0xc20 [ 701.885442][T12415] ? __nla_parse+0x40/0x50 [ 701.889895][T12415] tc_modify_qdisc+0x4d5/0x1c30 [ 701.894790][T12415] ? qdisc_create+0x1440/0x1440 [ 701.899689][T12415] ? bpf_lsm_capable+0x9/0x10 [ 701.904412][T12415] ? security_capable+0x92/0xc0 [ 701.909318][T12415] ? qdisc_create+0x1440/0x1440 [ 701.914258][T12415] rtnetlink_rcv_msg+0x3c7/0xe00 [ 701.919234][T12415] ? rtnl_fill_vf+0x490/0x490 [ 701.923945][T12415] ? rcu_is_watching+0x12/0xb0 [ 701.928778][T12415] ? rcu_is_watching+0x12/0xb0 [ 701.933575][T12415] ? lock_release+0x4c8/0x6a0 [ 701.938367][T12415] ? lock_sync+0x190/0x190 [ 701.942892][T12415] ? rcu_preempt_deferred_qs_irqrestore+0x4f9/0xb70 [ 701.949525][T12415] ? reacquire_held_locks+0x4c0/0x4c0 [ 701.954923][T12415] netlink_rcv_skb+0x16b/0x440 [ 701.959728][T12415] ? rtnl_fill_vf+0x490/0x490 [ 701.964518][T12415] ? netlink_ack+0x1380/0x1380 [ 701.969314][T12415] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 701.975165][T12415] ? __rcu_read_unlock+0x2ac/0x570 [ 701.980319][T12415] ? netlink_deliver_tap+0x1a0/0xd00 [ 701.985642][T12415] netlink_unicast+0x53b/0x810 [ 701.990441][T12415] ? netlink_attachskb+0x870/0x870 [ 701.995583][T12415] ? __phys_addr_symbol+0x30/0x70 [ 702.000643][T12415] ? __check_object_size+0x322/0x730 [ 702.006054][T12415] netlink_sendmsg+0x8b4/0xd70 [ 702.010872][T12415] ? netlink_unicast+0x810/0x810 [ 702.015843][T12415] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 702.021173][T12415] ? netlink_unicast+0x810/0x810 [ 702.026141][T12415] __sock_sendmsg+0xd5/0x180 [ 702.030773][T12415] ____sys_sendmsg+0x2ac/0x940 [ 702.035581][T12415] ? copy_msghdr_from_user+0x10b/0x160 [ 702.041069][T12415] ? kernel_sendmsg+0x50/0x50 [ 702.045789][T12415] ? rcu_is_watching+0x12/0xb0 [ 702.050591][T12415] ? kfree+0x23d/0x370 [ 702.054696][T12415] ___sys_sendmsg+0x135/0x1d0 [ 702.059406][T12415] ? do_recvmmsg+0x740/0x740 [ 702.064028][T12415] ? rcu_is_watching+0x12/0xb0 [ 702.068833][T12415] ? rcu_is_watching+0x12/0xb0 [ 702.073641][T12415] ? preempt_count_sub+0x160/0x160 [ 702.078955][T12415] ? __might_fault+0xe3/0x190 [ 702.083674][T12415] __sys_sendmmsg+0x1a1/0x450 [ 702.088407][T12415] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 702.093486][T12415] ? reacquire_held_locks+0x4c0/0x4c0 [ 702.098906][T12415] ? kernel_fpu_begin_mask+0x270/0x270 [ 702.104464][T12415] ? folio_memcg_unlock+0x240/0x240 [ 702.109706][T12415] __x64_sys_sendmmsg+0x9c/0x100 [ 702.114689][T12415] do_syscall_64+0xd0/0x250 [ 702.119317][T12415] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 702.125252][T12415] RIP: 0033:0x7f7e7487cce9 [ 702.129688][T12415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 702.149323][T12415] RSP: 002b:00007f7e756450c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 702.157768][T12415] RAX: ffffffffffffffda RBX: 00007f7e7499c050 RCX: 00007f7e7487cce9 [ 702.165757][T12415] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 000000000000000b [ 702.173748][T12415] RBP: 00007f7e748c947a R08: 0000000000000000 R09: 0000000000000000 [ 702.181741][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.189821][T12415] R13: 000000000000006e R14: 00007f7e7499c050 R15: 00007ffc0f5adf78 [ 702.197827][T12415] [ 702.200861][T12415] Modules linked in: [ 702.238360][T12415] ---[ end trace 0000000000000000 ]--- [ 702.243907][T12415] RIP: 0010:hfsc_tcf_block+0x3f/0x70 [ 702.249350][T12415] Code: de e8 25 8d e4 f8 48 85 db 74 2c e8 8b 91 e4 f8 e8 86 91 e4 f8 48 8d 7b 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 15 48 8b 43 58 5b 5d c3 e8 5f 91 e4 f8 48 8d 9d d0 [ 702.307272][T12415] RSP: 0018:ffffc90015ba72f8 EFLAGS: 00010206 [ 702.313434][T12415] RAX: dffffc0000000000 RBX: 000000000000fff2 RCX: ffffc9000a289000 [ 702.326733][T12415] RDX: 0000000000002009 RSI: ffffffff88a3922a RDI: 000000000001004a [ 702.334777][T12415] RBP: ffff88803c0da000 R08: 0000000000000007 R09: 0000000000000000 [ 702.344921][T12415] R10: 000000000000fff2 R11: ffffffff8898d569 R12: ffff888037194000 [ 702.353107][T12415] R13: ffffffff8beeb540 R14: 0000000000000002 R15: ffffffff8f3b84e0 [ 702.362548][T12415] FS: 00007f7e756456c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 702.371734][T12415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.379102][T12415] CR2: 00007f07f577a038 CR3: 000000001e552000 CR4: 00000000003506f0 [ 702.390858][T12415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 702.400924][T12397] BTRFS info (device loop2): rebuilding free space tree [ 702.401046][T12415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 702.425000][T12397] BTRFS info (device loop2): disabling free space tree [ 702.435567][T12397] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 702.448452][T12397] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 702.460678][T12415] Kernel panic - not syncing: Fatal exception [ 702.467136][T12415] Kernel Offset: disabled [ 702.471502][T12415] Rebooting in 86400 seconds..