}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3be3}]}, 0x44}}, 0x20008040) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) socket$inet_udplite(0x2, 0x2, 0x88) 11:38:50 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ee3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1, &(0x7f0000000040)=""/162, 0xa2}, &(0x7f0000000140)=0x40) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:50 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) 11:38:50 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000e7c000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 64) mbind(&(0x7f0000e7b000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x8, 0x1, 0x3) (rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000e7d000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e7e000/0x1000)=nil, &(0x7f0000e7b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7d000/0x3000)=nil, &(0x7f0000000000)="a6a8ceef96bb252358878baa9c7ac072c0cba496ac0f1eac6fe5a9ece4f7deeab0f0bd4f984d1aa7d850896eeb83e48609b995c66d6bb25dc37c1d272a1669dd50e7c96b81f76ed1372e6c3a090b609d695ed2a6e11712dc9820b5f5a373483d277f3b1f4c37653c673bd6b2949b12cae2", 0x71}, 0x68) 11:38:50 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ca4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/108, 0x6c, 0x0, &(0x7f0000000280)=""/251, 0xfb}, &(0x7f0000000240)=0x40) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1fc, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0x196, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0x6b, {0x20, 0xaf, 0x6, "4585d00f9cb6e35f77d07a759b82499f2c2ec063075ffa65982225f918f995481ebacfad29bc189f3281875847a4df8d0ef0d7f54d11ab1b24719e5aacbca84b9d8b9ff572dea3ab7bf5238f4d2f2b477a75468b23906f75ecc524b81b8fcead434ab1f2f625db61"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb9, 0x2}}, @ibss={0x6, 0x2, 0x101}, @measure_req={0x26, 0xe3, {0x7f, 0x1, 0x3f, "ab6fa3706efdc87a222da9b489b7f802263cef190c32b26ca67f65eac0084abe8e3f8fd362b5e299f1ed18d017ca7596d3c913d53cbfbc197e305a2fbfc19db1b384128e17875d2add6f60b1196f0d0e2c7420ef29ce6412927ef27e9f7e9f5391b1a06316947df7cf3c56945256f78d638a9439dbed700937c0767119d99c4922c5f4fc37b0e6ecb5af7a9e2d86a337dfcdd9347107a0e39433f7b23c7fc5c498a7328b75be42cc60f219b7fa5d0c67730457653c0a01604b5342e5daecff5d0667d2967318ea958a4a55f5eda94420d1159fb2baf50f155848adc49060b5f3"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x1, @device_b, 0x6cc3, "", 0x7, 0x3ff, @device_b, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x7fff}, @peer_mgmt={0x75, 0x4, {0x1, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x880}, 0x4050) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ea5000/0x1000)=nil) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x40010, r3, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000c54000/0x4000)=nil) munlock(&(0x7f0000d41000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x130}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x3}, {0x24}, {0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x24, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3be3}]}, 0x44}}, 0x20008040) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x130}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x3}, {0x24}, {0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x24, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3be3}]}, 0x44}}, 0x20008040) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 11:38:50 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x4) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) 11:38:50 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 11:38:50 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x3) 11:38:50 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) mremap(&(0x7f0000e7c000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 32) mbind(&(0x7f0000e7b000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x8, 0x1, 0x3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000e7d000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e7e000/0x1000)=nil, &(0x7f0000e7b000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7d000/0x3000)=nil, &(0x7f0000000000)="a6a8ceef96bb252358878baa9c7ac072c0cba496ac0f1eac6fe5a9ece4f7deeab0f0bd4f984d1aa7d850896eeb83e48609b995c66d6bb25dc37c1d272a1669dd50e7c96b81f76ed1372e6c3a090b609d695ed2a6e11712dc9820b5f5a373483d277f3b1f4c37653c673bd6b2949b12cae2", 0x71}, 0x68) 11:38:50 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ca4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/108, 0x6c, 0x0, &(0x7f0000000280)=""/251, 0xfb}, &(0x7f0000000240)=0x40) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1fc, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0x196, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0x6b, {0x20, 0xaf, 0x6, "4585d00f9cb6e35f77d07a759b82499f2c2ec063075ffa65982225f918f995481ebacfad29bc189f3281875847a4df8d0ef0d7f54d11ab1b24719e5aacbca84b9d8b9ff572dea3ab7bf5238f4d2f2b477a75468b23906f75ecc524b81b8fcead434ab1f2f625db61"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb9, 0x2}}, @ibss={0x6, 0x2, 0x101}, @measure_req={0x26, 0xe3, {0x7f, 0x1, 0x3f, "ab6fa3706efdc87a222da9b489b7f802263cef190c32b26ca67f65eac0084abe8e3f8fd362b5e299f1ed18d017ca7596d3c913d53cbfbc197e305a2fbfc19db1b384128e17875d2add6f60b1196f0d0e2c7420ef29ce6412927ef27e9f7e9f5391b1a06316947df7cf3c56945256f78d638a9439dbed700937c0767119d99c4922c5f4fc37b0e6ecb5af7a9e2d86a337dfcdd9347107a0e39433f7b23c7fc5c498a7328b75be42cc60f219b7fa5d0c67730457653c0a01604b5342e5daecff5d0667d2967318ea958a4a55f5eda94420d1159fb2baf50f155848adc49060b5f3"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x1, @device_b, 0x6cc3, "", 0x7, 0x3ff, @device_b, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x7fff}, @peer_mgmt={0x75, 0x4, {0x1, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x880}, 0x4050) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ea5000/0x1000)=nil) (async, rerun: 64) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) (rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x40010, r3, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000c54000/0x4000)=nil) (async, rerun: 64) munlock(&(0x7f0000d41000/0x1000)=nil, 0x1000) (async, rerun: 64) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:50 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x4) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) (async) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) 11:38:50 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 11:38:50 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x130}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x3}, {0x24}, {0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x24, 0x1}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3be3}]}, 0x44}}, 0x20008040) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) socket$inet_udplite(0x2, 0x2, 0x88) 11:38:50 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:38:50 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ed5000/0x2000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180), 0x1, 0x7) mremap(&(0x7f0000c26000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000fee000/0x3000)=nil) 11:38:50 executing program 1: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) 11:38:50 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7f}}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x12}, {0x30, 0x1}, {0x12}, {0x16}, {0x24, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x62, 0x1}, {0x5, 0x1}, {0xc}, {0x48, 0x1}, {0x18}, {0x2, 0x1}, {0x12}, {0x1b, 0x1}, {0x16}, {0x1}, {0x24}, {0x24}, {0x16}, {}, {0x1b, 0x1}, {0x2, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x9}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:50 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:38:50 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x4) mlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) (async) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) 11:38:51 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ca4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/108, 0x6c, 0x0, &(0x7f0000000280)=""/251, 0xfb}, &(0x7f0000000240)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ca4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/108, 0x6c, 0x0, &(0x7f0000000280)=""/251, 0xfb}, &(0x7f0000000240)=0x40) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1fc, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_IE={0x196, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @tim={0x5, 0x6b, {0x20, 0xaf, 0x6, "4585d00f9cb6e35f77d07a759b82499f2c2ec063075ffa65982225f918f995481ebacfad29bc189f3281875847a4df8d0ef0d7f54d11ab1b24719e5aacbca84b9d8b9ff572dea3ab7bf5238f4d2f2b477a75468b23906f75ecc524b81b8fcead434ab1f2f625db61"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb9, 0x2}}, @ibss={0x6, 0x2, 0x101}, @measure_req={0x26, 0xe3, {0x7f, 0x1, 0x3f, "ab6fa3706efdc87a222da9b489b7f802263cef190c32b26ca67f65eac0084abe8e3f8fd362b5e299f1ed18d017ca7596d3c913d53cbfbc197e305a2fbfc19db1b384128e17875d2add6f60b1196f0d0e2c7420ef29ce6412927ef27e9f7e9f5391b1a06316947df7cf3c56945256f78d638a9439dbed700937c0767119d99c4922c5f4fc37b0e6ecb5af7a9e2d86a337dfcdd9347107a0e39433f7b23c7fc5c498a7328b75be42cc60f219b7fa5d0c67730457653c0a01604b5342e5daecff5d0667d2967318ea958a4a55f5eda94420d1159fb2baf50f155848adc49060b5f3"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x1, @device_b, 0x6cc3, "", 0x7, 0x3ff, @device_b, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x7fff}, @peer_mgmt={0x75, 0x4, {0x1, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x880}, 0x4050) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ea5000/0x1000)=nil) (async) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ea5000/0x1000)=nil) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x40010, r3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x40010, r3, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000c54000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000c54000/0x4000)=nil) munlock(&(0x7f0000d41000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ed5000/0x2000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180), 0x1, 0x7) mremap(&(0x7f0000c26000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000fee000/0x3000)=nil) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ed5000/0x2000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180), 0x1, 0x7) (async) mremap(&(0x7f0000c26000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000fee000/0x3000)=nil) (async) 11:38:51 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 11:38:51 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:38:51 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:38:51 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7f}}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x12}, {0x30, 0x1}, {0x12}, {0x16}, {0x24, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x62, 0x1}, {0x5, 0x1}, {0xc}, {0x48, 0x1}, {0x18}, {0x2, 0x1}, {0x12}, {0x1b, 0x1}, {0x16}, {0x1}, {0x24}, {0x24}, {0x16}, {}, {0x1b, 0x1}, {0x2, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x9}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7f}}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x12}, {0x30, 0x1}, {0x12}, {0x16}, {0x24, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x62, 0x1}, {0x5, 0x1}, {0xc}, {0x48, 0x1}, {0x18}, {0x2, 0x1}, {0x12}, {0x1b, 0x1}, {0x16}, {0x1}, {0x24}, {0x24}, {0x16}, {}, {0x1b, 0x1}, {0x2, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x9}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ed5000/0x2000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180), 0x1, 0x7) mremap(&(0x7f0000c26000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000fee000/0x3000)=nil) 11:38:51 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$vsock_dgram(0x28, 0x2, 0x0) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) (async) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) 11:38:51 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) 11:38:51 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:38:51 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd29, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7f}}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1e, 0x13, [{0x12}, {0x30, 0x1}, {0x12}, {0x16}, {0x24, 0x1}, {0x16, 0x1}, {0x1, 0x1}, {0xb}, {0x0, 0x1}, {0x62, 0x1}, {0x5, 0x1}, {0xc}, {0x48, 0x1}, {0x18}, {0x2, 0x1}, {0x12}, {0x1b, 0x1}, {0x16}, {0x1}, {0x24}, {0x24}, {0x16}, {}, {0x1b, 0x1}, {0x2, 0x1}, {0x48}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x9}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) getpid() (async) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 11:38:51 executing program 4: mlock(&(0x7f0000c14000/0x4000)=nil, 0x4000) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x4) mbind(&(0x7f0000c16000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:38:51 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x2ccc12f121f9aa04, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 11:38:51 executing program 4: mlock(&(0x7f0000c14000/0x4000)=nil, 0x4000) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x4) mbind(&(0x7f0000c16000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x3) mlock(&(0x7f0000c14000/0x4000)=nil, 0x4000) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x4) (async) mbind(&(0x7f0000c16000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x3) (async) 11:38:51 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) (async) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) (async) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) inotify_init() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x2ccc12f121f9aa04, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 11:38:51 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) inotify_init() (async) inotify_init() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:51 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 4: mlock(&(0x7f0000c14000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000c14000/0x4000)=nil, 0x4000) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x4) mbind(&(0x7f0000c16000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f00000000c0)) 11:38:51 executing program 0: mincore(&(0x7f0000ff3000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/37) mlock(&(0x7f0000c42000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x2, 0x3, 0x2ccc12f121f9aa04, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 11:38:51 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) inotify_init() (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:51 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='/del\x8f:\xff\xff\xff\xff\x00', r1) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=',m&\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffc) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0xd242, 0x7, 0x7) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:38:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000004) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a2030303030303030303030353620610535356165666300"], 0x31, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 0: mincore(&(0x7f0000ff3000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/37) (async) mlock(&(0x7f0000c42000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 5: socketpair(0xa, 0x0, 0x89c, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0xff}}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048081}, 0x10) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='/del\x8f:\xff\xff\xff\xff\x00', r1) (async) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=',m&\x00', r1) (async) keyctl$search(0xa, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffc) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0xd242, 0x7, 0x7) 11:38:51 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc00000, 0x2, &(0x7f0000400000/0xc00000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000e3e000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/60, 0x3c, 0x0, &(0x7f0000000040)=""/93, 0x5d}, &(0x7f0000000100)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) shmget$private(0x0, 0x4000, 0x8, &(0x7f00006d5000/0x4000)=nil) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x5, 0x40, 0xff, 0x0, 0x80000000, 0x41112, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffff8000, 0xffffffffffffff7f}, 0x20, 0x2, 0x1ff, 0x3, 0x7f, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x4) 11:38:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000004) (async) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a2030303030303030303030353620610535356165666300"], 0x31, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 0: mincore(&(0x7f0000ff3000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/37) mlock(&(0x7f0000c42000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000180), 0x1, 0x3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, &(0x7f0000000180), 0x1, 0x3) 11:38:51 executing program 5: socketpair(0xa, 0x0, 0x89c, 0x0) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0xff}}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048081}, 0x10) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ef3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2, 0x0, &(0x7f00000003c0)=""/96, 0x60}, &(0x7f0000000480)=0x40) 11:38:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000004) (async) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a2030303030303030303030353620610535356165666300"], 0x31, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:51 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc00000, 0x2, &(0x7f0000400000/0xc00000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000e3e000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/60, 0x3c, 0x0, &(0x7f0000000040)=""/93, 0x5d}, &(0x7f0000000100)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) shmget$private(0x0, 0x4000, 0x8, &(0x7f00006d5000/0x4000)=nil) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f00006d5000/0x4000)=nil) 11:38:51 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='/del\x8f:\xff\xff\xff\xff\x00', r1) (async) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=',m&\x00', r1) (async) keyctl$search(0xa, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffc) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0xd242, 0x7, 0x7) 11:38:51 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fad000/0x2000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:52 executing program 5: socketpair(0xa, 0x0, 0x89c, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0xff}}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048081}, 0x10) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x4}, 0x4, 0x2, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0xfffffffffffffff7, 0x1, 0x1000}) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8080) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x9, 0x4300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000e60000/0x9000)=nil, 0x2005, 0x5, 0x1d}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c36000/0x4000)=nil, 0x4000}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x800000000000000, 0x1, 0x3) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc00000, 0x2, &(0x7f0000400000/0xc00000)=nil) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000e3e000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/60, 0x3c, 0x0, &(0x7f0000000040)=""/93, 0x5d}, &(0x7f0000000100)=0x40) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) (async) shmget$private(0x0, 0x4000, 0x8, &(0x7f00006d5000/0x4000)=nil) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fad000/0x2000)=nil}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:52 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, r0}, 0x10) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:38:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x9, 0x4300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000e60000/0x9000)=nil, 0x2005, 0x5, 0x1d}) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c36000/0x4000)=nil, 0x4000}}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x800000000000000, 0x1, 0x3) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8080) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8080) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fad000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fad000/0x2000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/63, 0x3f, 0x0, &(0x7f0000000040)=""/87, 0x57}, &(0x7f0000000100)=0x40) 11:38:52 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, r0}, 0x10) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:38:52 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x9, 0x4300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000e60000/0x9000)=nil, 0x2005, 0x5, 0x1d}) (rerun: 32) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c36000/0x4000)=nil, 0x4000}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x800000000000000, 0x1, 0x3) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 11:38:52 executing program 0: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d98000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x2, 0x1, 0x3) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/63, 0x3f, 0x0, &(0x7f0000000040)=""/87, 0x57}, &(0x7f0000000100)=0x40) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8080) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8080) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:38:52 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x0, r0}, 0x10) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:38:52 executing program 0: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d98000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x2, 0x1, 0x3) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/63, 0x3f, 0x0, &(0x7f0000000040)=""/87, 0x57}, &(0x7f0000000100)=0x40) 11:38:52 executing program 4: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c78000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x1, 0x3) 11:38:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x1}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffff, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:52 executing program 0: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d98000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x2, 0x1, 0x3) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10c40) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 11:38:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x1}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 11:38:52 executing program 4: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c78000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x1, 0x3) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffff, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10c40) (rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$snddsp(&(0x7f0000f37000/0x1000)=nil, 0x1000, 0xa, 0x13, 0xffffffffffffffff, 0x7000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 11:38:52 executing program 4: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c78000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x1, 0x3) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0xffff, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:52 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$snddsp(&(0x7f0000f37000/0x1000)=nil, 0x1000, 0xa, 0x13, 0xffffffffffffffff, 0x7000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10c40) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 11:38:52 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000300)={'ipvlan0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)="87173723392e2d0582e4f3", 0xb, r0}, 0x68) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x0, 0x800, 0x7) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/80, 0x50}, &(0x7f0000000140)=0x40) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$snddsp(&(0x7f0000f37000/0x1000)=nil, 0x1000, 0xa, 0x13, 0xffffffffffffffff, 0x7000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 11:38:52 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004891) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:52 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) (async) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000300)={'ipvlan0\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)="87173723392e2d0582e4f3", 0xb, r0}, 0x68) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x0, 0x800, 0x7) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/80, 0x50}, &(0x7f0000000140)=0x40) 11:38:52 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) getpid() mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:52 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004891) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:52 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) mbind(&(0x7f0000e95000/0xa000)=nil, 0xa000, 0x1, &(0x7f0000000000)=0x4000, 0x1, 0x3) mmap$KVM_VCPU(&(0x7f0000e95000/0x3000)=nil, 0x930, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 11:38:53 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) getpid() mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) (async) mbind(&(0x7f0000e95000/0xa000)=nil, 0xa000, 0x1, &(0x7f0000000000)=0x4000, 0x1, 0x3) mmap$KVM_VCPU(&(0x7f0000e95000/0x3000)=nil, 0x930, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 11:38:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004891) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:53 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000300)={'ipvlan0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)="87173723392e2d0582e4f3", 0xb, r0}, 0x68) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x0, 0x800, 0x7) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/80, 0x50}, &(0x7f0000000140)=0x40) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000300)={'ipvlan0\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)="87173723392e2d0582e4f3", 0xb, r0}, 0x68) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket(0x0, 0x800, 0x7) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4, r5}) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/77, 0x4d, 0x1, &(0x7f0000000080)=""/80, 0x50}, &(0x7f0000000140)=0x40) (async) 11:38:53 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) getpid() mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) mbind(&(0x7f0000e95000/0xa000)=nil, 0xa000, 0x1, &(0x7f0000000000)=0x4000, 0x1, 0x3) mmap$KVM_VCPU(&(0x7f0000e95000/0x3000)=nil, 0x930, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000e3b000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000e38000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000000c0)="976be3e6f169885c67a344fb7a8291fb2e18ed000fa63d673c75aa1970f5bb9e965d7b707214ee7a6c425301240b33ad", 0x30, r0}, 0x68) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0x5000, 0x1000, &(0x7f0000e3c000/0x1000)=nil}) mbind(&(0x7f0000e3a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x0) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='FROZEN\x00', 0x7) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:53 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) 11:38:53 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/250, 0xfa, 0x0, &(0x7f0000000100)=""/200, 0xc8}, &(0x7f0000000240)=0x40) 11:38:53 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/205, 0xcd, 0x0, &(0x7f0000000100)=""/42, 0x2a}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0xfffffffffffffffd, 0x1, 0x3) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x0, 0x100010, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000e3b000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000e38000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000000c0)="976be3e6f169885c67a344fb7a8291fb2e18ed000fa63d673c75aa1970f5bb9e965d7b707214ee7a6c425301240b33ad", 0x30, r0}, 0x68) (async) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0x5000, 0x1000, &(0x7f0000e3c000/0x1000)=nil}) (async) mbind(&(0x7f0000e3a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x0) 11:38:53 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:53 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/250, 0xfa, 0x0, &(0x7f0000000100)=""/200, 0xc8}, &(0x7f0000000240)=0x40) 11:38:53 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/205, 0xcd, 0x0, &(0x7f0000000100)=""/42, 0x2a}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0xfffffffffffffffd, 0x1, 0x3) 11:38:53 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:38:53 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) (async) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/250, 0xfa, 0x0, &(0x7f0000000100)=""/200, 0xc8}, &(0x7f0000000240)=0x40) 11:38:53 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:53 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x0, 0x100010, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x101002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000e38000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000e3b000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000e38000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f00000000c0)="976be3e6f169885c67a344fb7a8291fb2e18ed000fa63d673c75aa1970f5bb9e965d7b707214ee7a6c425301240b33ad", 0x30, r0}, 0x68) (async, rerun: 32) r1 = pkey_alloc(0x0, 0x5) (rerun: 32) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x1, 0x5000, 0x1000, &(0x7f0000e3c000/0x1000)=nil}) (async) mbind(&(0x7f0000e3a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x0) 11:38:53 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)="0741834c7e2b429d0052d2e3cb0384bc6642376fb97914e8369ca35008342a5af842", 0x22, r1}, 0x68) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/238, &(0x7f0000000240)=0xee) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffe1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x811) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:38:53 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/205, 0xcd, 0x0, &(0x7f0000000100)=""/42, 0x2a}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ca9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/205, 0xcd, 0x0, &(0x7f0000000100)=""/42, 0x2a}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0xfffffffffffffffd, 0x1, 0x3) 11:38:53 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)="0741834c7e2b429d0052d2e3cb0384bc6642376fb97914e8369ca35008342a5af842", 0x22, r1}, 0x68) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/238, &(0x7f0000000240)=0xee) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffe1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x811) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000000)=0x8, 0x3f, 0x7) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x12511, 0x0, &(0x7f0000e93000/0x1000)=nil}) 11:38:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x101000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x2, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x64e6) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0xbad5, 0xffffffffffff0000, 0x1) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x9], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 0: r0 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']\x00', 0xfffffffffffffffd) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="02", 0x1}, 0x68) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fce000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) userfaultfd(0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x100000, 0x1, 0x3) shmget(0x1, 0x3000, 0x8, &(0x7f0000fc1000/0x3000)=nil) mlock(&(0x7f0000f7a000/0x1000)=nil, 0x1000) 11:38:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:38:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x101000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x2, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x64e6) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0xbad5, 0xffffffffffff0000, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x101000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x2, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x64e6) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0xbad5, 0xffffffffffff0000, 0x1) (async) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000000)=0x8, 0x3f, 0x7) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x12511, 0x0, &(0x7f0000e93000/0x1000)=nil}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000000)=0x8, 0x3f, 0x7) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x12511, 0x0, &(0x7f0000e93000/0x1000)=nil}) (async) 11:38:53 executing program 0: r0 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']\x00', 0xfffffffffffffffd) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="02", 0x1}, 0x68) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fce000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) userfaultfd(0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x100000, 0x1, 0x3) shmget(0x1, 0x3000, 0x8, &(0x7f0000fc1000/0x3000)=nil) mlock(&(0x7f0000f7a000/0x1000)=nil, 0x1000) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']\x00', 0xfffffffffffffffd) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) (async) keyctl$search(0xa, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, r1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="02", 0x1}, 0x68) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fce000/0x3000)=nil, 0x3000}, 0x1}) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) (async) userfaultfd(0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x100000, 0x1, 0x3) (async) shmget(0x1, 0x3000, 0x8, &(0x7f0000fc1000/0x3000)=nil) (async) mlock(&(0x7f0000f7a000/0x1000)=nil, 0x1000) (async) 11:38:53 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)="0741834c7e2b429d0052d2e3cb0384bc6642376fb97914e8369ca35008342a5af842", 0x22, r1}, 0x68) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (rerun: 32) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/238, &(0x7f0000000240)=0xee) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffe1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x811) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:53 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000000)=0x8, 0x3f, 0x7) (async) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x12511, 0x0, &(0x7f0000e93000/0x1000)=nil}) 11:38:53 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x101000) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x2, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x64e6) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f00000000c0)=0xbad5, 0xffffffffffff0000, 0x1) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:53 executing program 0: r0 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']\x00', 0xfffffffffffffffd) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) (async) keyctl$search(0xa, r0, &(0x7f0000000140)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, r1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)="02", 0x1}, 0x68) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fce000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) (async) userfaultfd(0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x100000, 0x1, 0x3) (async) shmget(0x1, 0x3000, 0x8, &(0x7f0000fc1000/0x3000)=nil) (async) mlock(&(0x7f0000f7a000/0x1000)=nil, 0x1000) 11:38:53 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x3, 0x35}) 11:38:53 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) socketpair(0x5, 0x5, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r2, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r5, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x800, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xee, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004041}, 0x80) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7d00557f06080000", @ANYRES16=r7, @ANYBLOB="000228bd7000fddbdf25170000000a000600080211bdab4bf0b4ba9ad79ca4df5d00c25e00000100000a00060008021100000100000a00060008022500000000000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000665a27d0e2130de460b2861cbbb97ea431a672144277faff6c367cc71eb9bc775c99064c54668519696f0c46b8c387a728a55361a426ead9049247470c14987b739d454a6eef21a2ff6e85b1df0894fc939fcf54dd83533f7a96f6082a91d26b0ca99caa5dc4aacfdc6ddffaa0909a68ca620da3f3ece8310a"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) 11:38:53 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3c040102, &(0x7f0000c20000/0x3000)=nil, 0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x7fffffff, 0x1, 0x1) 11:38:53 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:53 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x3, 0x35}) 11:38:54 executing program 0: get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000d0b000/0x2000)=nil) mbind(&(0x7f0000d00000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x3, 0x4, 0x4) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:54 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 32) socketpair(0x5, 0x5, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r2, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r5, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x800, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xee, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004041}, 0x80) (async, rerun: 64) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7d00557f06080000", @ANYRES16=r7, @ANYBLOB="000228bd7000fddbdf25170000000a000600080211bdab4bf0b4ba9ad79ca4df5d00c25e00000100000a00060008021100000100000a00060008022500000000000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000665a27d0e2130de460b2861cbbb97ea431a672144277faff6c367cc71eb9bc775c99064c54668519696f0c46b8c387a728a55361a426ead9049247470c14987b739d454a6eef21a2ff6e85b1df0894fc939fcf54dd83533f7a96f6082a91d26b0ca99caa5dc4aacfdc6ddffaa0909a68ca620da3f3ece8310a"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) 11:38:54 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3c040102, &(0x7f0000c20000/0x3000)=nil, 0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x7fffffff, 0x1, 0x1) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 1: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x4, 0x3, 0x35}) 11:38:54 executing program 0: get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) (async) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000d0b000/0x2000)=nil) (async) mbind(&(0x7f0000d00000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x3, 0x4, 0x4) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3c040102, &(0x7f0000c20000/0x3000)=nil, 0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180)=0x7fffffff, 0x1, 0x1) 11:38:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x56a5, 0x80040) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 0: get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000d0b000/0x2000)=nil) mbind(&(0x7f0000d00000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x3, 0x4, 0x4) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x6) 11:38:54 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) socketpair(0x5, 0x5, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r2, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r5, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x800, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xee, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004041}, 0x80) (async) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7d00557f06080000", @ANYRES16=r7, @ANYBLOB="000228bd7000fddbdf25170000000a000600080211bdab4bf0b4ba9ad79ca4df5d00c25e00000100000a00060008021100000100000a00060008022500000000000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000665a27d0e2130de460b2861cbbb97ea431a672144277faff6c367cc71eb9bc775c99064c54668519696f0c46b8c387a728a55361a426ead9049247470c14987b739d454a6eef21a2ff6e85b1df0894fc939fcf54dd83533f7a96f6082a91d26b0ca99caa5dc4aacfdc6ddffaa0909a68ca620da3f3ece8310a"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) 11:38:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0xa00) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@random="a5edd80bc6e6", @empty]}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x4000)=nil}) mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ff0000/0x2000)=nil) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000180)=0xffffffffffffffff, 0x1, 0x0) 11:38:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x56a5, 0x80040) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x6) (async) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x6) 11:38:54 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000d2e000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x56a5, 0x80040) (async) syz_open_dev$dri(&(0x7f0000000000), 0x56a5, 0x80040) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:38:54 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000d2e000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) pkey_mprotect(&(0x7f0000d2e000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) (async) 11:38:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0xa00) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@random="a5edd80bc6e6", @empty]}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x4000)=nil}) mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) (async) shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ff0000/0x2000)=nil) (async) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000180)=0xffffffffffffffff, 0x1, 0x0) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async, rerun: 32) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x6) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:54 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 11:38:54 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0xa00) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@random="a5edd80bc6e6", @empty]}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff2000/0x4000)=nil}) mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ff0000/0x2000)=nil) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000180)=0xffffffffffffffff, 0x1, 0x0) 11:38:54 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000d2e000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x10) 11:38:54 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e1a000/0x1000)=nil, 0x1000) mbind(&(0x7f0000e19000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x4000100000000, 0xffffffffffffffff, 0x6) munlock(&(0x7f0000e19000/0x4000)=nil, 0x4000) 11:38:54 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000e6c000/0x1000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:54 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) (async) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x10) 11:38:54 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000e1a000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000e19000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x4000100000000, 0xffffffffffffffff, 0x6) (async) munlock(&(0x7f0000e19000/0x4000)=nil, 0x4000) 11:38:54 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:38:54 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 11:38:54 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000e6c000/0x1000)=nil}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:55 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) (async) mlock(&(0x7f0000fef000/0x4000)=nil, 0x4000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x10) (rerun: 32) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 1: mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e1a000/0x1000)=nil, 0x1000) mbind(&(0x7f0000e19000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x4000100000000, 0xffffffffffffffff, 0x6) munlock(&(0x7f0000e19000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000e1a000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000e19000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x4000100000000, 0xffffffffffffffff, 0x6) (async) munlock(&(0x7f0000e19000/0x4000)=nil, 0x4000) (async) 11:38:55 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:55 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000e6c000/0x1000)=nil}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:55 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = pkey_alloc(0x0, 0x5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x9ce86cbc7c96a7de, 0x3, 0xc5d, 0x0, 0x1}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(r0, 0x7, &(0x7f0000000040)=[&(0x7f0000d05000/0x3000)=nil, &(0x7f0000eed000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d77000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000eb3000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000)=0x4, 0x80000000, 0x3) 11:38:55 executing program 2: mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:38:55 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = pkey_alloc(0x0, 0x5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async, rerun: 32) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, r1) (rerun: 32) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 64) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (rerun: 64) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180)=0x7, 0xb, 0x1) 11:38:55 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x9ce86cbc7c96a7de, 0x3, 0xc5d, 0x0, 0x1}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() (async) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(r0, 0x7, &(0x7f0000000040)=[&(0x7f0000d05000/0x3000)=nil, &(0x7f0000eed000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d77000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000eb3000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000)=0x4, 0x80000000, 0x3) 11:38:55 executing program 2: mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:38:55 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = pkey_alloc(0x0, 0x5) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, r1) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000000)=[&(0x7f0000dc3000/0x4000)=nil], &(0x7f0000000040)=[0x0, 0x8, 0x9, 0xce1, 0x4, 0xe19, 0xfff, 0x8, 0xfffffffa], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 11:38:55 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x9ce86cbc7c96a7de, 0x3, 0xc5d, 0x0, 0x1}) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = getpid() accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) move_pages(r0, 0x7, &(0x7f0000000040)=[&(0x7f0000d05000/0x3000)=nil, &(0x7f0000eed000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d77000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000eb3000/0x3000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000000)=0x4, 0x80000000, 0x3) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180)=0x7, 0xb, 0x1) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) 11:38:55 executing program 2: mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x20001000, 0x1, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d33000/0x2000)=nil, &(0x7f0000e82000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e32000/0x2000)=nil, &(0x7f0000d8b000/0x4000)=nil, &(0x7f0000ebf000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c6f000/0x1000)=nil, &(0x7f0000de1000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="973f8eaf0e351e5fc5f3f9876829a8c12fbb958a492d11b4dc9f6cc0ef3d6a8e009b208a2f2ee76bc32b2db718aee833a9ec5c4e6833232f48d6f829eb256dcb1e92456b7486a85baa38faa194cadb5345560b250cddeeb140167370ce7f1b5fb07b6c840a3d7abf38e937f9a138871021ed326341f14b5326eb771afda63be646204592716ee6fcd9f466da11332d6220b609daa723e9d070b3f19ecc006a4210f2696f6a12180d0c10eccb3eead703380ab2d702bfab1017d40ff5d8ab0c", 0xbf, r0}, 0x68) 11:38:55 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="6af56728f7ba67fdf721876b2a099a7249b379ffbc7869a28abbd20455059defe01d8731c8c8cd1333bd267ac0d86febf455fff57efe8515fa22bf84026d8a674101c72242279eec20bf9503561bd6ffbac04bc44fca285464dbf305be0545209a3570e5cfe2da6f277a0384f773", 0x6e}, 0x68) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x260, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x20, 0x28}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22b, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @random="d84a6be1e580", {0x8}}, 0x4000, 0x4f, @random=0x3, @void, @void, [{0xdd, 0x83, "be401e0d72f116850800776c6e3161bce2a7d8d7db1949af4d216b74f7a00be0ad40b95f17d46c15a61e8c6b8529c35c6fa693a7f418767a25dc66223d175682e7ef6888c459cbe91fb5446e1b68bcf65ef9c57aca978eff1d6afef7e47cdced54d0af8279564baae9be778ab927340f95747341104b079046a756fb1cae6169261dcd"}, {0xdd, 0x36, "e015a672a0742a53089ce5ed6e0ef3fc1aa4dbf653854c67cac38d90568a180a3062c25ef69ce6e2172d0b29a3269a3c1725177d8945"}, {0xdd, 0x8e, "e5e0bfde6ff3fbd17559b5eb3430c7155e7ccb9989f048c4c3af74ff6ac7fc7a858edba32c557ef72d35a974de949cb40e1f40fccf21e9b2ec34bcb16dbc5e41e3e94fe268d4fa93806661482e1c8c8e0f0d56af080137c44f780466b423b60b0c2045ef0dba5f36f4ce245e1842ee56a9478a92accd4c362c32a5895d61968760abef073b6a448b6c2fb36715a8"}, {0xdd, 0x73, "3fc62c6c5318b83214b123037f16c8d5b7db4f53c0057dddb22b94e01ec44ac2d5cd1e4b380c6f4718d932fe282fb903b74c1c6ec673d2386469248a9fb0ca478c0a0788f82f831cef03892714e54aa7f5d80121bbca729cc0721d44a2f02f6e96ef7ae9f52c043413fa66dccb77164982bbdc"}, {0xdd, 0x45, "7fdc7cdeeaeba469667e71601668876e3839797ba3e0885424bb21a26cb318bb02ddf475f9368965d999dc64926359d8c9e1580c17e6298bf355c8f1a39bed0c52dced6c08"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x10000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x846f59efa430c6e) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000280)={'caif0\x00', 0x200}) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)={'pimreg0\x00', 0x200}) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) inotify_rm_watch(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180)=0x7, 0xb, 0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8000, &(0x7f0000000180)=0x7, 0xb, 0x1) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x10010, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000b4c000/0x2000)=nil, &(0x7f000093d000/0x1000)=nil, &(0x7f0000d3d000/0x1000)=nil, &(0x7f0000b07000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000000040)="a08a3f664cb7b3b4ea9064475a56c4b97878ee7e98c701938b11ece42b81f3dc7f8ac21ce695a597ca93676ef38dc4cd2abde918343fbe202a0421f815a4313c0e9b9d095e6480f0d68817ff186ab48e74150811472e59fc8a0cd592b089aa64e407cd9912a36fcb8b5038a9417206080db0b5237d0e8294815e19bffc505e25003d8d7dd08c969c33884b83aa0dc2e9044d3c4efceab2b9952eaaf7b34af90d44df6dbc797a0a286bc877", 0xab, r2}, 0x68) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x20001000, 0x1, 0x2) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d33000/0x2000)=nil, &(0x7f0000e82000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e32000/0x2000)=nil, &(0x7f0000d8b000/0x4000)=nil, &(0x7f0000ebf000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c6f000/0x1000)=nil, &(0x7f0000de1000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="973f8eaf0e351e5fc5f3f9876829a8c12fbb958a492d11b4dc9f6cc0ef3d6a8e009b208a2f2ee76bc32b2db718aee833a9ec5c4e6833232f48d6f829eb256dcb1e92456b7486a85baa38faa194cadb5345560b250cddeeb140167370ce7f1b5fb07b6c840a3d7abf38e937f9a138871021ed326341f14b5326eb771afda63be646204592716ee6fcd9f466da11332d6220b609daa723e9d070b3f19ecc006a4210f2696f6a12180d0c10eccb3eead703380ab2d702bfab1017d40ff5d8ab0c", 0xbf, r0}, 0x68) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x10010, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000b4c000/0x2000)=nil, &(0x7f000093d000/0x1000)=nil, &(0x7f0000d3d000/0x1000)=nil, &(0x7f0000b07000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000000040)="a08a3f664cb7b3b4ea9064475a56c4b97878ee7e98c701938b11ece42b81f3dc7f8ac21ce695a597ca93676ef38dc4cd2abde918343fbe202a0421f815a4313c0e9b9d095e6480f0d68817ff186ab48e74150811472e59fc8a0cd592b089aa64e407cd9912a36fcb8b5038a9417206080db0b5237d0e8294815e19bffc505e25003d8d7dd08c969c33884b83aa0dc2e9044d3c4efceab2b9952eaaf7b34af90d44df6dbc797a0a286bc877", 0xab, r2}, 0x68) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x10010, r1, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000b4c000/0x2000)=nil, &(0x7f000093d000/0x1000)=nil, &(0x7f0000d3d000/0x1000)=nil, &(0x7f0000b07000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000000040)="a08a3f664cb7b3b4ea9064475a56c4b97878ee7e98c701938b11ece42b81f3dc7f8ac21ce695a597ca93676ef38dc4cd2abde918343fbe202a0421f815a4313c0e9b9d095e6480f0d68817ff186ab48e74150811472e59fc8a0cd592b089aa64e407cd9912a36fcb8b5038a9417206080db0b5237d0e8294815e19bffc505e25003d8d7dd08c969c33884b83aa0dc2e9044d3c4efceab2b9952eaaf7b34af90d44df6dbc797a0a286bc877", 0xab, r2}, 0x68) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) 11:38:55 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="6af56728f7ba67fdf721876b2a099a7249b379ffbc7869a28abbd20455059defe01d8731c8c8cd1333bd267ac0d86febf455fff57efe8515fa22bf84026d8a674101c72242279eec20bf9503561bd6ffbac04bc44fca285464dbf305be0545209a3570e5cfe2da6f277a0384f773", 0x6e}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="6af56728f7ba67fdf721876b2a099a7249b379ffbc7869a28abbd20455059defe01d8731c8c8cd1333bd267ac0d86febf455fff57efe8515fa22bf84026d8a674101c72242279eec20bf9503561bd6ffbac04bc44fca285464dbf305be0545209a3570e5cfe2da6f277a0384f773", 0x6e}, 0x68) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x260, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x20, 0x28}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22b, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @random="d84a6be1e580", {0x8}}, 0x4000, 0x4f, @random=0x3, @void, @void, [{0xdd, 0x83, "be401e0d72f116850800776c6e3161bce2a7d8d7db1949af4d216b74f7a00be0ad40b95f17d46c15a61e8c6b8529c35c6fa693a7f418767a25dc66223d175682e7ef6888c459cbe91fb5446e1b68bcf65ef9c57aca978eff1d6afef7e47cdced54d0af8279564baae9be778ab927340f95747341104b079046a756fb1cae6169261dcd"}, {0xdd, 0x36, "e015a672a0742a53089ce5ed6e0ef3fc1aa4dbf653854c67cac38d90568a180a3062c25ef69ce6e2172d0b29a3269a3c1725177d8945"}, {0xdd, 0x8e, "e5e0bfde6ff3fbd17559b5eb3430c7155e7ccb9989f048c4c3af74ff6ac7fc7a858edba32c557ef72d35a974de949cb40e1f40fccf21e9b2ec34bcb16dbc5e41e3e94fe268d4fa93806661482e1c8c8e0f0d56af080137c44f780466b423b60b0c2045ef0dba5f36f4ce245e1842ee56a9478a92accd4c362c32a5895d61968760abef073b6a448b6c2fb36715a8"}, {0xdd, 0x73, "3fc62c6c5318b83214b123037f16c8d5b7db4f53c0057dddb22b94e01ec44ac2d5cd1e4b380c6f4718d932fe282fb903b74c1c6ec673d2386469248a9fb0ca478c0a0788f82f831cef03892714e54aa7f5d80121bbca729cc0721d44a2f02f6e96ef7ae9f52c043413fa66dccb77164982bbdc"}, {0xdd, 0x45, "7fdc7cdeeaeba469667e71601668876e3839797ba3e0885424bb21a26cb318bb02ddf475f9368965d999dc64926359d8c9e1580c17e6298bf355c8f1a39bed0c52dced6c08"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x10000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x846f59efa430c6e) (async) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x846f59efa430c6e) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000280)={'caif0\x00', 0x200}) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)={'pimreg0\x00', 0x200}) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x20001000, 0x1, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d33000/0x2000)=nil, &(0x7f0000e82000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e32000/0x2000)=nil, &(0x7f0000d8b000/0x4000)=nil, &(0x7f0000ebf000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c6f000/0x1000)=nil, &(0x7f0000de1000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="973f8eaf0e351e5fc5f3f9876829a8c12fbb958a492d11b4dc9f6cc0ef3d6a8e009b208a2f2ee76bc32b2db718aee833a9ec5c4e6833232f48d6f829eb256dcb1e92456b7486a85baa38faa194cadb5345560b250cddeeb140167370ce7f1b5fb07b6c840a3d7abf38e937f9a138871021ed326341f14b5326eb771afda63be646204592716ee6fcd9f466da11332d6220b609daa723e9d070b3f19ecc006a4210f2696f6a12180d0c10eccb3eead703380ab2d702bfab1017d40ff5d8ab0c", 0xbf, r0}, 0x68) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x20001000, 0x1, 0x2) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d33000/0x2000)=nil, &(0x7f0000e82000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e32000/0x2000)=nil, &(0x7f0000d8b000/0x4000)=nil, &(0x7f0000ebf000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c6f000/0x1000)=nil, &(0x7f0000de1000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="973f8eaf0e351e5fc5f3f9876829a8c12fbb958a492d11b4dc9f6cc0ef3d6a8e009b208a2f2ee76bc32b2db718aee833a9ec5c4e6833232f48d6f829eb256dcb1e92456b7486a85baa38faa194cadb5345560b250cddeeb140167370ce7f1b5fb07b6c840a3d7abf38e937f9a138871021ed326341f14b5326eb771afda63be646204592716ee6fcd9f466da11332d6220b609daa723e9d070b3f19ecc006a4210f2696f6a12180d0c10eccb3eead703380ab2d702bfab1017d40ff5d8ab0c", 0xbf, r0}, 0x68) (async) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f15000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x1ff, 0x10001, 0x3) 11:38:55 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="6af56728f7ba67fdf721876b2a099a7249b379ffbc7869a28abbd20455059defe01d8731c8c8cd1333bd267ac0d86febf455fff57efe8515fa22bf84026d8a674101c72242279eec20bf9503561bd6ffbac04bc44fca285464dbf305be0545209a3570e5cfe2da6f277a0384f773", 0x6e}, 0x68) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x260, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x20, 0x28}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22b, 0x33, @mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x4}, @broadcast, @device_a, @random="d84a6be1e580", {0x8}}, 0x4000, 0x4f, @random=0x3, @void, @void, [{0xdd, 0x83, "be401e0d72f116850800776c6e3161bce2a7d8d7db1949af4d216b74f7a00be0ad40b95f17d46c15a61e8c6b8529c35c6fa693a7f418767a25dc66223d175682e7ef6888c459cbe91fb5446e1b68bcf65ef9c57aca978eff1d6afef7e47cdced54d0af8279564baae9be778ab927340f95747341104b079046a756fb1cae6169261dcd"}, {0xdd, 0x36, "e015a672a0742a53089ce5ed6e0ef3fc1aa4dbf653854c67cac38d90568a180a3062c25ef69ce6e2172d0b29a3269a3c1725177d8945"}, {0xdd, 0x8e, "e5e0bfde6ff3fbd17559b5eb3430c7155e7ccb9989f048c4c3af74ff6ac7fc7a858edba32c557ef72d35a974de949cb40e1f40fccf21e9b2ec34bcb16dbc5e41e3e94fe268d4fa93806661482e1c8c8e0f0d56af080137c44f780466b423b60b0c2045ef0dba5f36f4ce245e1842ee56a9478a92accd4c362c32a5895d61968760abef073b6a448b6c2fb36715a8"}, {0xdd, 0x73, "3fc62c6c5318b83214b123037f16c8d5b7db4f53c0057dddb22b94e01ec44ac2d5cd1e4b380c6f4718d932fe282fb903b74c1c6ec673d2386469248a9fb0ca478c0a0788f82f831cef03892714e54aa7f5d80121bbca729cc0721d44a2f02f6e96ef7ae9f52c043413fa66dccb77164982bbdc"}, {0xdd, 0x45, "7fdc7cdeeaeba469667e71601668876e3839797ba3e0885424bb21a26cb318bb02ddf475f9368965d999dc64926359d8c9e1580c17e6298bf355c8f1a39bed0c52dced6c08"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x10000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x846f59efa430c6e) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000280)={'caif0\x00', 0x200}) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000180)={'pimreg0\x00', 0x200}) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000f93000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/37, 0x25}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f15000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x1ff, 0x10001, 0x3) 11:38:55 executing program 1: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x4, 0x10010, r1, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000b4c000/0x2000)=nil, &(0x7f000093d000/0x1000)=nil, &(0x7f0000d3d000/0x1000)=nil, &(0x7f0000b07000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e97000/0x1000)=nil, &(0x7f0000000040)="a08a3f664cb7b3b4ea9064475a56c4b97878ee7e98c701938b11ece42b81f3dc7f8ac21ce695a597ca93676ef38dc4cd2abde918343fbe202a0421f815a4313c0e9b9d095e6480f0d68817ff186ab48e74150811472e59fc8a0cd592b089aa64e407cd9912a36fcb8b5038a9417206080db0b5237d0e8294815e19bffc505e25003d8d7dd08c969c33884b83aa0dc2e9044d3c4efceab2b9952eaaf7b34af90d44df6dbc797a0a286bc877", 0xab, r2}, 0x68) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000f93000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/37, 0x25}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x2, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000f93000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/37, 0x25}, &(0x7f00000000c0)=0x40) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) (async) 11:38:55 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000f15000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x1ff, 0x10001, 0x3) 11:38:55 executing program 1: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 2: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000120}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf40, 0x6e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bd}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x611}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x6c, 0x3a, 0xdf, 0x0, 0x9, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0xb005, 0x5, 0x7f, 0x8, 0xffffffffffff7fff, 0x9b0, 0xfff, 0x0, 0x10001, 0x0, 0x1}, r3, 0xcb, 0xffffffffffffffff, 0x12) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000f93000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=""/37, 0x25}, &(0x7f00000000c0)=0x40) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:55 executing program 1: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f15000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x1ff, 0x10001, 0x3) 11:38:55 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000120}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf40, 0x6e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bd}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x611}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x6c, 0x3a, 0xdf, 0x0, 0x9, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0xb005, 0x5, 0x7f, 0x8, 0xffffffffffff7fff, 0x9b0, 0xfff, 0x0, 0x10001, 0x0, 0x1}, r3, 0xcb, 0xffffffffffffffff, 0x12) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000120}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf40, 0x6e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bd}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x611}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) getpid() (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x6c, 0x3a, 0xdf, 0x0, 0x9, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0xb005, 0x5, 0x7f, 0x8, 0xffffffffffff7fff, 0x9b0, 0xfff, 0x0, 0x10001, 0x0, 0x1}, r3, 0xcb, 0xffffffffffffffff, 0x12) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) (async) 11:38:55 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) 11:38:55 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:55 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 11:38:55 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000120}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf40, 0x6e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bd}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x611}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1f, 0x6c, 0x3a, 0xdf, 0x0, 0x9, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0xb005, 0x5, 0x7f, 0x8, 0xffffffffffff7fff, 0x9b0, 0xfff, 0x0, 0x10001, 0x0, 0x1}, r3, 0xcb, 0xffffffffffffffff, 0x12) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:56 executing program 2: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/63, 0x3f, 0x0, &(0x7f0000000040)=""/87, 0x57}, &(0x7f0000000100)=0x40) 11:38:56 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 11:38:56 executing program 3: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c4d000/0x3000)=nil, &(0x7f0000fb1000/0x2000)=nil], &(0x7f0000000040)=[0x1, 0x1, 0x50, 0x1, 0x10001], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x3, &(0x7f0000d76000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000e8e000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:38:56 executing program 3: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 11:38:56 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000004) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a2030303030303030303030353620610535356165666300"], 0x31, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x2400c880) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='/del\x8f:\xff\xff\xff\xff\x00', r1) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=',m&\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffc) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0xd242, 0x7, 0x7) 11:38:56 executing program 3: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 1: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x3}, &(0x7f0000001dc0)='/del\x8f:\xff\xff\xff\xff\x00', r1) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)=',m&\x00', r1) keyctl$search(0xa, r0, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffc) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f47000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0xd242, 0x7, 0x7) 11:38:56 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000e7d000/0x4000)=nil) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x48001}, 0x4004000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:56 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x2400c880) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fdb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/157, 0x9d, 0x1, &(0x7f0000000100)}, &(0x7f0000000280)=0x40) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x351000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x1, 0x1, 0xb8, 0x0, 0x1000}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/48, 0x30, 0x1, &(0x7f0000000240)=""/138, 0x8a}, &(0x7f0000000340)=0x40) 11:38:56 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mbind(&(0x7f0000e28000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000100)=0x4, 0x8000000000000001, 0x7) mremap(&(0x7f0000edc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000c1c000/0x4000)=nil) 11:38:56 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) (async) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) (async) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) (async) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) (async) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/48, 0x30, 0x1, &(0x7f0000000240)=""/138, 0x8a}, &(0x7f0000000340)=0x40) 11:38:56 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 2: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x2400c880) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x2400c880) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 3: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000e08000/0x1000)=nil) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/48, 0x30, 0x1, &(0x7f0000000240)=""/138, 0x8a}, &(0x7f0000000340)=0x40) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) (async, rerun: 64) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) (async) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) (async, rerun: 64) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) (rerun: 32) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) 11:38:56 executing program 3: shmget$private(0x0, 0x3000, 0x1844, &(0x7f0000f52000/0x3000)=nil) mbind(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r2, 0x4) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) shmget(0x3, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) 11:38:56 executing program 3: shmget$private(0x0, 0x3000, 0x1844, &(0x7f0000f52000/0x3000)=nil) mbind(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 11:38:56 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0xd}, 0x10) 11:38:56 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f70000/0x4000)=nil, 0x4000}}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:38:56 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 11:38:56 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) 11:38:56 executing program 3: shmget$private(0x0, 0x3000, 0x1844, &(0x7f0000f52000/0x3000)=nil) mbind(&(0x7f0000001000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:56 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000c9c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f0000000040)=""/9, 0x9}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x4000) mmap$snddsp(&(0x7f0000c13000/0x4000)=nil, 0x4000, 0x2, 0x12, r3, 0x3000) 11:38:56 executing program 5: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$invalidate(0x15, r0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x109000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x8000, 0x8, 0x3) 11:38:56 executing program 5: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$invalidate(0x15, r0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x109000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:56 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000c9c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f0000000040)=""/9, 0x9}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x4000) mmap$snddsp(&(0x7f0000c13000/0x4000)=nil, 0x4000, 0x2, 0x12, r3, 0x3000) 11:38:56 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x1, 0x100000, 0x1000, &(0x7f0000e9d000/0x1000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000e1f000/0x1000)=nil) mremap(&(0x7f0000c28000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000efd000/0x4000)=nil) 11:38:56 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000c9c000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f0000000040)=""/9, 0x9}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x4000) mmap$snddsp(&(0x7f0000c13000/0x4000)=nil, 0x4000, 0x2, 0x12, r3, 0x3000) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) 11:38:56 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c1a3fcb0fc2b70b331819249c02b799660dfe1e63c44fd7447ded4625a5ae0b1b57795ceb23b57befb7ccdb6e6d7612d8995849690fd4bcfdc67ccde4c5d9aff620e9e7a7c6ca00"/86, @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf255a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000f58000/0x1000)=nil) 11:38:56 executing program 5: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x801) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff872}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7522e65c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x800) 11:38:56 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:56 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x29}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, [{0x48}, {0x1}, {0x18, 0x1}, {0x12, 0x1}, {0xb, 0x1}, {0x5}, {0x30}, {0x6c}, {0x18}, {0x12, 0x1}, {0x1b, 0x1}, {0x1b}, {0x9}, {0x5}, {0x16, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0x18}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0xc76}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1c4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x4000010) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) 11:38:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:56 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 11:38:56 executing program 0: shmget(0x1, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x80000001, 0x200040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 11:38:56 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) 11:38:56 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) 11:38:56 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c84000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x1, &(0x7f00000004c0)=""/243, 0xf3}, &(0x7f00000001c0)=0x40) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) 11:38:57 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8000, 0x38c1, 0x1) 11:38:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff", @ANYRES32=0x0]}) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) r6 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x38c1, 0x1) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x10001, 0x4, 0x1) 11:38:57 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x38c1, 0x1) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) r5 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x10000000) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x1) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x38c1, 0x1) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) 11:38:57 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000d00000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4, 0x4, 0x0, &(0x7f0000000040)=""/95, 0x5f}, &(0x7f0000000100)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x1) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000), 0x38c1, 0x1) 11:38:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:57 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:57 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000d00000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4, 0x4, 0x0, &(0x7f0000000040)=""/95, 0x5f}, &(0x7f0000000100)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:38:57 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:38:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000), 0x38c1, 0x1) 11:38:57 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x4, 0x1) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:58 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000), 0x38c1, 0x1) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x400c0c5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x2000008, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x4, 0x1) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x400c0c5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x2000008, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:58 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x0, 0x1) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x4, 0x1) 11:38:58 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x0, 0x1) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efffffbfffffffff"]}) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x400c0c5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x2000008, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x0, 0x1) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x4, 0x1) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) 11:38:58 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8000, 0x38c1, 0x0) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x400c0c5) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x0, 0x1) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]}) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x0, 0x1) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]}) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x0, 0x1) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x0) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB]}) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x0) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11e"]}) 11:38:58 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x4, 0x0) 11:38:58 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11e"]}) 11:38:58 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x10001, 0x0, 0x1) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11e"]}) 11:38:58 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:58 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000efff"]}) 11:38:58 executing program 4: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:58 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:58 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:58 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa"]}) 11:38:59 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept$nfc_llcp(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:59 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa"]}) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x3, 0x3) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa"]}) 11:38:59 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x3) 11:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa000000"]}) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:59 executing program 1: mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) 11:38:59 executing program 0: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa000000"]}) 11:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:59 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa000000"]}) 11:38:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa000000"]}) 11:38:59 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, 0x0, &(0x7f0000000440)) 11:38:59 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:38:59 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60) 11:38:59 executing program 4: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000ef"]}) 11:38:59 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r0, 0x0, 0x0) 11:38:59 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) mbind(&(0x7f0000d78000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000200)=0x6c, 0x3, 0x3) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000"]}) 11:38:59 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 11:38:59 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) 11:38:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 1: socketpair(0x26, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ae8e28bd7000fbcbdf250248524afb7c0d7006dfbbb2"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x73}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000d69000/0x1000)=nil}) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x400c0c5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000040)=0x2000008, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000"]}) 11:38:59 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ee6000/0x2000)=nil) 11:38:59 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x74}, 0x1, 0x0, 0x0, 0x14004094}, 0x20004004) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180)=0x6, 0x2, 0x1) 11:38:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="677265306a08952c327c96d11efa00000000"]}) 11:38:59 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="0b9713f7bc2d36ec731e64892ede3ade2172f4f49d8465d7a0a44e2f40c81a1dcb0ca3cebeacee5b9250d31533073f8bb42be69db59be66094d7b7eb39c66aba3278136e0b4a79f12e9d5a5b619fa2739a1c0d39e866d3627ac20ceb08fd77fdd48debc64bded069da378c3c604d45d73bd537f98e8a8f07791adfaeba5cde2b3a16bbbe19c21376c035cee885bd91c18a58e63e665e7269c83764acb189410f634a5aa6b81dc650dcfb08d52eba4207d36a479a9fc17cc96e04e8c5ab2477e4fd495b7c4c380fb5e6f7168dc8918f5e5a4c9fa0453605ce6487497c08fde7dfea3b75dde4ef8490cf3034ecd7530b444cc2254b", 0xf4, r0}, 0x68) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 1: mlock(&(0x7f0000fee000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000e89000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) 11:38:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x5) 11:38:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)=ANY=[]}) 11:38:59 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x5) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x5) 11:38:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$dsp(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000df6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000c06000/0x3000)=nil, &(0x7f0000b55000/0x1000)=nil, &(0x7f0000ed5000/0x1000)=nil, &(0x7f00008c5000/0x2000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f00009f7000/0x1000)=nil, &(0x7f0000001180)="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", 0x1000, r0}, 0x68) 11:38:59 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000000)=""/32, 0x20) shmget(0x1, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:38:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$dsp(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000df6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000c06000/0x3000)=nil, &(0x7f0000b55000/0x1000)=nil, &(0x7f0000ed5000/0x1000)=nil, &(0x7f00008c5000/0x2000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f00009f7000/0x1000)=nil, &(0x7f0000001180)="afd0ab4856e206e9df9185b5bbec4150be159234dd59a8f1cd74220b747031a6d411e902256247b0bf5d645980393e0edddd3258ef1ffe11a28606437e6e7bdec17e4fd9632e36cdba2e9b6d9ddd3928a86c1a9c6f52ec7531d99cd991bd3d9da8b9f1b51f7acb0a2b66980697416f7b7ffcdd17b4b4fa5dc76061b465178b0305c719db9138215d8b6f155733bf3f2cd80a66a7046fe681e50afce9de565730b6031c135f69dde97fb2bad2f7f16a67dd566e74808be3345b82488ec694fe6736e7cf0f43bce7640d5ee39b8b7356dc5ae6c3b318dac72d04056f30c691b70756b235c54438402ed160a329b4a500569085fe1130bf4c3064161cb973375947b180f06a0b5a95cdea1b40cd0d1bfe4e6cbe1e91490f9d1371c40172ab4481649d29d177123ff0beb4d4866d8dc516c368d29a458d0ec78f9acd66f6e495a61244701489e928ad1b471d00a432c9871e9706076f2efad8484101c41f7abd16f251c8debd2913a77abae9df89219d1e4b24e679f12d7d37709050d7a700d73eaf5768fc0ed15ac5552c7f72d6aafce707ee1e98098cf9c22f5638e48005c8afaa8155fb51ccb210961ba3fc6ac662165223fd9024799b79f064492476a4ac5fffe943348b5d71c1b8d30b0cc2261fb1ac47637b65b4d00887af8ae59839968861f2ba8a9303ad5a09b3142deca74d3439131a89cd92269d7249cb89dab7f77588513f7a06fe52f4aea246d58edf14363f2ca4e5e447b1b2b5ad4b0eeb53d3d6211c26d8ef2ab6169bb42c6df8bba2fe5c7f1242b6d0cebe4231fc94f23b5e404df1784b6943c14a5d9353b28fe3a36fb5b4793b34a83d255458db08fd0e45b837ee424f5e5234e3b7dac7b77f0bbc0dd508e4fcbb17d10575eeddf553f95344f35d0ee99e54742ef6cdf5aa57e03fe61b8c8ac0eb2ecf6c67dc32c2f04525daa9853ef7fc37c3c67d5ef2a6825e3ff058169cf16ba3b9284270b87d8e2703ffbf0b14b3af9f45a5a456fc50bcb81427dffcc65ae94057ce881934bf71d9b223b673613e0c9dd62d94f7c5e2185879c2606b58618e02e92e4013b0fe0b42ff7deb3c2f2de83670101c25049e81cb215f52dfc0b4fb92e2864f31ebd49b22de7b6c27fcb329a12f15c01490e7995eaaaf3108e0d9f0caf2e31aa0235d348a72aa540eb5d886ee11fd8fa2d42648983bb5d0d2f0897c2890f1ae73af0c25c63cea2036a4e3468e3e0b0f7098a915180d9324f50dd3986eef48557cdb3a62c48d20aaffda5b0efb0890ba49754b83181016acc5f85477ad1b04c8c334eb8eed86522a8ca114aa14dbebb385ddd7f5bacc4472b08dad25f70f0b087f2311213f75314220f4591b7e4b33e32b4f419f2b454f24a68405e02dd6b535f52da45094f7c47f47f8d52c4305acfa078b0a6a6dc0ba12d40c6acb05600684cddc45e7e0082444b566a92e4113804ae3101ac46d5951a0e8cd53a783af6074664a7a432d2b214895134b116c539a595b3dadfbbad48ac3d0a26168f9aab6c54af9292130e60ba2eb9274dd9e25fb972fce0f0481beacbd6f97826aad8c84465b2caedd3f0dc4070f4df787ce1c3e94f4483dec39fc7c16c41c892bf741f4b85b7e83fce9ef2fb04bcdfdfe4e848afc81ead3f505c2e9a0bc42902cddb94ac2b6dd6886e2585d082510619838f779971b76c4cf315c3c06a4c7d5bce83a30438f8ddae53a720433b500ec005adac7e6cf36a21cdd4c4b3a261cb071ed84c022c020a23bf27038ac328f235a555bcd832a9f8585907a12510a08e403fcaf6d892dca7c5090486a3f50cc08a18ecbde6476745ea426d1603ae0a7d24de76955f003609e41c86d195db59b7df3ec2953b771b6073357550a1d0ff0fd8c683bdbb48e1aaf86addd8afd240faeff3e273eae8a2c12819bf24676fa4d2177c7cc650f472ed95104ffa9e9ed9c80b9dbbda9aa4af9ad7aff9e60a3c7c4488969546c6f7fc9e360cab469a31378452b5a0d0108484318e2a69820379024bec7f0329f2b1fde1e5d68af17f85694c97f3eda48ed96dd2500c297282ff8ae8d892929a6ed47289b8b0b1c7d73ab880e64fbf34aa0dc38a3f3f3cd97f94088985aefa22f43c10a9867a9fef74a14822bab797e3e0a970ba3bb4b091dfea48606d175592490b8162d730be2a59ff21eb2f8dee763f36604bf361dd4ba1bcdfdf1ffb19ad35d8887959d195813802f3ac350981b4c814045ffca871791bfe2ba7baac9a15f48e515079b2a1cd45216e41c40921536e33f98851d4767ef5f098fdab46044ab0c8ad014f289bf37fcdda47b638a4716491f61f347ab559f91b6414403683b320ff4c53cdba520e7f5b713d5b5dc04aec7ad2dc49e3455783a4575e03fd511d24c02716448c8b13b0cca04025cecebc9cffa2fe3a01c156d8690d8ff760bc221a41a45ba650e869f387def365ba667be9b358415d5888733429034b306a5efaba51f5f358ce2227de2c73d87e7df7a9eb12d94ff9e29939fb38da4ae0864c440f4e700928514a811420f061f3ec8eff13f067de55fcf48e84966c8da9a320f2af28141e9f9a921076f1bb9fe4cda7880a3932aa472e964923a9ddfacb0d4593d0da1e280f23ac0c3c44f0514d00596258ae76b9a97153d6ddf5afbe818f0009e63aebce91565b2a73f2b123168803ea92280e8743ac4e9fa18a4aff263cddf381aa9bea3bbb5c4b2542d3334302cbcf3a3c6fbf99430af3ef6e6b4a03ef1b8b83ce25cb4727cbf529d49f4741e6713bf5d7914f3ff3b0f273559ec7cc92852fb10fed481e79fc5fe5b231092da33b46d6b9dc8bfb9046e2a67fdc679a0b012d73e6419e4e08af12a46bad65f0d13a7f7f4e83741db25035a0e078505771a7fa6be904cf2684d418bf5485623ede3adb2d6d20d01541d3dd809f09c8f48686fdc3868a208f17c4cbc93d2752cd68e7caf062b2434ddc7401b48f8b314edee0abb41ad2c914e70e1afa7bcc88b252e1364d519459eccfb57be684b55d68a2a2a27dea015dea67abbdd5ffd0df3c70053f305676df306e91fcd743d1d12e202549b31a915858d93d86a295267008b7e1960785fa9882ad34683940fa8ddfed18c05d8b9cd9723b0050254db02f53254289bf8d56779fbda6c1e5c2c23a8d463131f492d8d077cbe720c05dad54f06103f9b1b72f11b2c3d3e57b49c6714fb1665c36131d9a364daeb64e27ad37c55a55eda856b29b81935022b70bb9b16351ee6f3fa664d7f0a8d600f241309e1f163e34fa0ed73ec0e7dbbc81bce48cc2fb00451cc1c8c730fdbbd7555f927f836b0260a12bd7d779078af8e4cc8857bd2c53922cf6660b116004422e2857f9bf4688dbce9d6adcabbe10f943c4b6bd1efea6e074cd5abcbb2740c99cd6e6a949f7a1b692d5b8675aeef63044428d8a726d62b46744651679c27f18fe82e3b69ec5b82f72f5c4e886ff226120709ff17d5e5bb27025bdf9cc3ea960ad39a2479e394f716ed435465ac611de45c4fc31be533f28b49b5be7cdfad82ac496e5e8c29120c35a031a2c8cb66b88ab0b4cd381ce6495945d915add0f0ef9384e7d19741b70909895d2a6dd41418e24a961b116d0d5e9abce11f9b34d8889f756430ba7d48de436d0e594cba1ab59668108fd20a445ef44d746e5b8bd47b16ec2c602300e31d70ee95db46777e0624731c72c7a84987656e2ca25d0182a3f6492328938f79bd2e0b07a83cd7195a522a688af6b5740e4c4c35c81618fd6c04dd926f58b59d9c45da59d600e8ef4d168a6afeb2fd0f5654d1cf6377f2faabf6d7b955ae36a3863271997a2f2edc4339879c432958f717c3a55cee9cf850a1cdced0942446e849904048f9ab971aa9ff552871afa30dbbd5b60221fadf673e7de16a438b1b3826f8f3b7a8c566fe7bf7ea6681418e7dae3ddfb5b7305ca3d0e2dd18b458b63647c1b9ee613f80177484a32cc4cf69cdbce1c357f44e1dd9166cbe4c8c4d6595a95770235b1b76a0f7e4cb980d051d91682771fb15d60b2d27ba713d6095e34adf79663f909b98ca2b30b353405b3966a77fa1c838402163e2e89f4698c86d07230dd097e4bb9303ae13b2e5395db2766db7945886b3c938287f65334a7c5999c3af3ac021d793d3c588d2265f9e08b9ef696167cde6dca665a310b1623462241969114f47f3f0a189f8bf5c3527746fc65598d24a912f73ff25bf07383892e5b3009a5326a97d08e5de1939a2840fb5f09565ec13ab20a4b4776dc0bd1129bf76e9303d78cfea426c83a5b9126961467f9a3e441f44ed588e632526d06e9c1075dd992d3d272282b6d8ecdc30893d725d4a1c998b242a1722481fc7a6a86461e3aa2517bca1b03bbe73bc816871805821f30c2ea03ac9f84d40532a24361829c6095913c4e03cc4b8d86e3e767c7c2ca424527bec618c885eaf1784eb8112436f30ddcc360c5539462c7fba5706d6cba2dfeff03319941ba22378e29fb7a690b9dac5eea541ce7ece9190f50655c0b88d1124a81badac0feab1b433495f822629defe3dae4564e2cad8bf83790b7eea898795b3ad48769497d31be8efc5a0319ed15c410e22aa89c62a8e4afeedaca132003663693fa7ea0dc37188925721abfacaef3cedfc9b6ebb3ee16c72ba20801448b994b56aca9539443cfa68480de778f134b8734d2130911600694f2865b3d41b3a87c93677c45084a98001767286029d921544223fd316777090774ab520369aad47129c09efb89fddff0c83aaa75014abb4f3063944ef37a7d46bb3b3c667a5be114320840da796f023962cb3c4ee5d13b4bb6d78010c01dcdc53554ecf253287d11a54e66ca604790b08bd9c7f2212034a0ca9ba8b006ebc85e8bd480fb82bd5dbc4b16ff5383fcff08bea9f9f31f450b444b477d73f9d05f48e83c529a5cba6377dcfa846ca691e584be7127a6f404b24a849b85445a13b0de9322ae3f4d75ad3092c5dd8c657866f506cc1573afd136d72e0e9d0279a1110145c31bc23c9a20011ccf044a1d4df39e925970088a50c548ef9a07221dcb7d33d11c37f4aa3c12156511d38a1e20e19b36e6e6131463e5da269be4b05102c621c688aa5c165c7f34a84372ea1a00a2c0967d72517fcdf76725d59ef696eca29428f59caf9e05fc7a8155d784207c428a400d2fc3865a33be5937320acd49f100e0af69ed8e5849a492cc98284b8b631794a4a4473cb8fa4df6386e17c8916be732f40a385d5a107cc5399e1bc00e70e18123e99bc017627cda77e456d071744c484703c16d03cd5875721f176a1c6355a8297dd44d309ef734924765e22b2b481e64a5393035bee47202c580cec32f5e7af21cf25c35629659921642d871014807515dc04e70dfd1f26133330a9c13bee129adf0187ac6dd9d04f6a4f1fbe68c17fd94448fe39a428a9e19037c20e56a49a52d2a1f42d874be49b1b264d834019ead1d8a0d8304c2014f250a327bc272c0ba577a25dd383322bf0aae9c1211e75c2fb8c90e29218baaf58c1377656421b7648cd171b10f0dea87eaca0a8bb9943de879c33b02af3c08e1475971e5aa2aea0203bc118b99a12babd40cd39d8edcc26925ce17cba4744bd629365273066d21ee434aabe1a903e742804946fc74eb4d72382ba410e1dbdbeca147220cb05a2d7382ba98ed149d663337546c471ec68e254b238d0835ec7c841445de54f23312a3fb0f4ec542c33fba2d5c6843156fc4d8e5b5d03a6141554fcea20bd8ae58194b88f683489ac4fcd264108d02a59917cbe4d9a241ba2b6f5d366069549", 0x1000, r0}, 0x68) 11:38:59 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x5) 11:38:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:38:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 11:38:59 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:38:59 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x5) 11:38:59 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:38:59 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:38:59 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$dsp(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000df6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000c06000/0x3000)=nil, &(0x7f0000b55000/0x1000)=nil, &(0x7f0000ed5000/0x1000)=nil, &(0x7f00008c5000/0x2000)=nil, &(0x7f0000ea2000/0x1000)=nil, &(0x7f00009f7000/0x1000)=nil, &(0x7f0000001180)="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", 0x1000, r0}, 0x68) 11:38:59 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:38:59 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) 11:39:00 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$dsp(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 11:39:00 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) 11:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$dsp(&(0x7f0000ac5000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) 11:39:00 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:39:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', 0x0}) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x20010, r0, 0xa000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x4000) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x101fb, 0x0, &(0x7f0000bac000/0x3000)=nil}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 0: mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_open_dev$mouse(&(0x7f00000000c0), 0x6, 0x40242) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7fffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x6a003) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 4: mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000100)=[&(0x7f00009a2000/0x2000)=nil, &(0x7f0000968000/0x4000)=nil, &(0x7f0000c01000/0x2000)=nil], &(0x7f0000000140)=[0x3, 0xde9, 0x0, 0x3], &(0x7f0000000180)=[0x0, 0x0], 0x4) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_alloc(0x0, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_alloc(0x0, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_alloc(0x0, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:00 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:00 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:00 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 11:39:01 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 11:39:01 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 0: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000000), 0x1, 0x3) 11:39:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000f09000/0x4000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 11:39:01 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:01 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xff47) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 0: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:02 executing program 2: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 2: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 0: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:02 executing program 5: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000100)=0x32b66dc7db773ad6, 0xc0800) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:02 executing program 0: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:02 executing program 0: get_mempolicy(0x0, 0x0, 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:02 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:02 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) mmap$dsp(&(0x7f0000cb6000/0x3000)=nil, 0x3000, 0x1000000, 0x90010, 0xffffffffffffffff, 0x0) 11:39:02 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ff7000/0x2000)=nil}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xb5, &(0x7f0000ff5000/0xa000)=nil, 0x4) 11:39:02 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:02 executing program 1: write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044c10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/249, 0xf9, 0x0, &(0x7f0000000100)=""/243, 0xf3}, &(0x7f0000000240)=0x40) 11:39:02 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) mmap$dsp(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x0) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 3: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:02 executing program 1: write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) mmap$dsp(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x0) 11:39:02 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:02 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 1: write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:02 executing program 3: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:02 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:02 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:02 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) mmap$dsp(&(0x7f0000faf000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x0) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:03 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:03 executing program 5: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:03 executing program 0: get_mempolicy(0x0, &(0x7f0000000080), 0x165d, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000d43000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/253, 0xfd, 0x0, &(0x7f0000000200)=""/20, 0x14}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:39:03 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 11:39:03 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, 0xffffffffffffffff, 0xc7b) shmget(0x3, 0x1000, 0x4f3527e2c700679f, &(0x7f0000ffd000/0x1000)=nil) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, 0xffffffffffffffff, 0xc7b) shmget(0x3, 0x1000, 0x4f3527e2c700679f, &(0x7f0000ffd000/0x1000)=nil) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:03 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) 11:39:03 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, r0, 0x0) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, 0xffffffffffffffff, 0xc7b) shmget(0x3, 0x1000, 0x4f3527e2c700679f, &(0x7f0000ffd000/0x1000)=nil) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) 11:39:03 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, 0xffffffffffffffff, 0xc7b) shmget(0x3, 0x1000, 0x4f3527e2c700679f, &(0x7f0000ffd000/0x1000)=nil) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000018, 0xffffffffffffffff) 11:39:03 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x80010, 0xffffffffffffffff, 0xc7b) 11:39:03 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:39:03 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mincore(&(0x7f0000c22000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/236) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) mremap(&(0x7f0000fa5000/0xc000)=nil, 0xc000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 11:39:03 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) 11:39:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4100) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) 11:39:03 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) 11:39:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4100) 11:39:03 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x10, r0, 0x0) 11:39:03 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) 11:39:03 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:03 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) 11:39:03 executing program 3: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4100) 11:39:03 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:03 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 3: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4100) 11:39:03 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:03 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) 11:39:03 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 11:39:04 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1, 0x12, 0xffffffffffffffff, 0x0) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 11:39:04 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0xfffffffffffffffe, 0x1, 0x3) 11:39:04 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, 0x0, 0x1, 0x3) 11:39:04 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, 0x0, 0x0, 0x3) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000de3000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0xc000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x5, 0x4) 11:39:04 executing program 5: mbind(&(0x7f0000fa5000/0x3000)=nil, 0x3000, 0x11c202b32c561bbb, 0x0, 0x0, 0x0) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000de3000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0xc000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x5, 0x4) 11:39:04 executing program 1: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 3: mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000de3000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0xc000) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x5, 0x4) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000de3000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0xc000) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 11:39:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000003aec3c684ad77a9100000800010002000000"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xf05a0d31d62e8c45}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) 11:39:04 executing program 0: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:04 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/177, 0xb1, 0x0, &(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000001200)=0x40) 11:39:04 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:04 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 11:39:04 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:39:04 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:04 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:39:05 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:05 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) mremap(&(0x7f0000f3c000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 11:39:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:39:05 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/54) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:05 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/54) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:05 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/54) 11:39:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 0: mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:05 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x1c}, 0x10) 11:39:05 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:05 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:05 executing program 0: mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 2: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 1: syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:05 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:05 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:05 executing program 0: mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 2: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 1: syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:05 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:05 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r2, 0x0) 11:39:05 executing program 1: syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:05 executing program 2: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 3: shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280240}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x40) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r1, 0x0) 11:39:05 executing program 3: shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 11:39:05 executing program 1: syz_open_dev$mouse(&(0x7f0000000040), 0x361, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:05 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xa, 0x0) 11:39:05 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:05 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:05 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) 11:39:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xa, 0x0) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:06 executing program 5: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) 11:39:06 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xa, 0x0) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 11:39:06 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x3) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180), 0xa, 0x0) 11:39:06 executing program 3: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:39:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180), 0xa, 0x0) 11:39:06 executing program 3: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180), 0xa, 0x0) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 3: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) mlock(&(0x7f0000d04000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:06 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 4: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 0: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xa}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, &(0x7f0000000180), 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 11:39:06 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:06 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000cc4000/0x3000)=nil) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:06 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x25, 0x4, 0xd0}) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:06 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:06 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 11:39:06 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x8004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9da}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4009891}, 0x4000000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, &(0x7f0000000180), 0x1, 0x3) 11:39:06 executing program 2: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x0, 0x12, r0, 0x0) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 2: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 1) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x10, r0, 0x0) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (fail_nth: 1) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 11:39:07 executing program 1: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x10, r0, 0x0) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3ff, 0x4e6903) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x100000000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/189, 0xbd, 0x1, &(0x7f0000000100)=""/211, 0xd3}, &(0x7f0000000240)=0x40) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 756.191100] FAULT_INJECTION: forcing a failure. [ 756.191100] name failslab, interval 1, probability 0, space 0, times 0 11:39:07 executing program 1: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 756.238870] CPU: 0 PID: 27418 Comm: syz-executor.2 Not tainted 4.14.307-syzkaller #0 [ 756.246819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 756.256185] Call Trace: [ 756.258781] dump_stack+0x1b2/0x281 [ 756.262420] should_fail.cold+0x10a/0x149 [ 756.266578] should_failslab+0xd6/0x130 [ 756.270559] kmem_cache_alloc+0x28e/0x3c0 [ 756.274716] mpol_new+0x151/0x2b0 [ 756.278182] SyS_mbind+0x211/0xb40 [ 756.281745] ? vfs_write+0x319/0x4d0 [ 756.285470] ? __mpol_dup+0x440/0x440 [ 756.289281] ? SyS_write+0x14d/0x210 [ 756.293016] ? SyS_read+0x210/0x210 [ 756.296667] ? __do_page_fault+0x159/0xad0 [ 756.300919] ? do_syscall_64+0x4c/0x640 [ 756.304897] ? __mpol_dup+0x440/0x440 [ 756.308716] do_syscall_64+0x1d5/0x640 [ 756.312615] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 756.317823] RIP: 0033:0x7fbc86cbb0f9 [ 756.321538] RSP: 002b:00007fbc8522d168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 756.329250] RAX: ffffffffffffffda RBX: 00007fbc86ddaf80 RCX: 00007fbc86cbb0f9 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x3) syz_open_dev$mouse(&(0x7f00000000c0), 0x3ff, 0x4e6903) (async) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3ff, 0x4e6903) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x100000000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/189, 0xbd, 0x1, &(0x7f0000000100)=""/211, 0xd3}, &(0x7f0000000240)=0x40) 11:39:07 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x10, r0, 0x0) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) 11:39:07 executing program 1: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (fail_nth: 2) [ 756.336521] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000000020ffa000 [ 756.343792] RBP: 00007fbc8522d1d0 R08: 000000000000000a R09: 0000000000000000 [ 756.351071] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 756.358347] R13: 00007ffdb55226bf R14: 00007fbc8522d300 R15: 0000000000022000 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 5: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3ff, 0x4e6903) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x100000000) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/189, 0xbd, 0x1, &(0x7f0000000100)=""/211, 0xd3}, &(0x7f0000000240)=0x40) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 5: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000c2a000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eb3000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f09000/0x4000)=nil, &(0x7f0000eab000/0x4000)=nil, &(0x7f0000d6c000/0x4000)=nil, &(0x7f0000fa5000/0x3000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000d59000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="84e6d70edf0aeedd0ca4a7ac9836f651361208dff62974eafb2bd678286899acb192967fa3f2a3a0ed1c000a0953458c4bcd8443c8c82382c9d53eee16b628cc0313998a851b953920bd2433eaa09ea850303c564cfba3526c0555a629934e44de664f08c9e787288e9a539d334c4006495b13c72dc2a190bb5cf514f5b649341838d160bb98692c8375d390939a7a60db6d17a7a0f6f1358149df17148c1078ac2ae245e62e6dc11469f3a3c6c89dfb5ceca792e272351c17c254", 0xbb}, 0x68) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:07 executing program 5: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000c2a000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eb3000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f09000/0x4000)=nil, &(0x7f0000eab000/0x4000)=nil, &(0x7f0000d6c000/0x4000)=nil, &(0x7f0000fa5000/0x3000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000d59000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="84e6d70edf0aeedd0ca4a7ac9836f651361208dff62974eafb2bd678286899acb192967fa3f2a3a0ed1c000a0953458c4bcd8443c8c82382c9d53eee16b628cc0313998a851b953920bd2433eaa09ea850303c564cfba3526c0555a629934e44de664f08c9e787288e9a539d334c4006495b13c72dc2a190bb5cf514f5b649341838d160bb98692c8375d390939a7a60db6d17a7a0f6f1358149df17148c1078ac2ae245e62e6dc11469f3a3c6c89dfb5ceca792e272351c17c254", 0xbb}, 0x68) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) 11:39:07 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:07 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000c2a000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eb3000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f09000/0x4000)=nil, &(0x7f0000eab000/0x4000)=nil, &(0x7f0000d6c000/0x4000)=nil, &(0x7f0000fa5000/0x3000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000d59000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="84e6d70edf0aeedd0ca4a7ac9836f651361208dff62974eafb2bd678286899acb192967fa3f2a3a0ed1c000a0953458c4bcd8443c8c82382c9d53eee16b628cc0313998a851b953920bd2433eaa09ea850303c564cfba3526c0555a629934e44de664f08c9e787288e9a539d334c4006495b13c72dc2a190bb5cf514f5b649341838d160bb98692c8375d390939a7a60db6d17a7a0f6f1358149df17148c1078ac2ae245e62e6dc11469f3a3c6c89dfb5ceca792e272351c17c254", 0xbb}, 0x68) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:07 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 5: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000c2a000/0x1000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eb3000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f09000/0x4000)=nil, &(0x7f0000eab000/0x4000)=nil, &(0x7f0000d6c000/0x4000)=nil, &(0x7f0000fa5000/0x3000)=nil, &(0x7f0000d1c000/0x4000)=nil, &(0x7f0000d59000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="84e6d70edf0aeedd0ca4a7ac9836f651361208dff62974eafb2bd678286899acb192967fa3f2a3a0ed1c000a0953458c4bcd8443c8c82382c9d53eee16b628cc0313998a851b953920bd2433eaa09ea850303c564cfba3526c0555a629934e44de664f08c9e787288e9a539d334c4006495b13c72dc2a190bb5cf514f5b649341838d160bb98692c8375d390939a7a60db6d17a7a0f6f1358149df17148c1078ac2ae245e62e6dc11469f3a3c6c89dfb5ceca792e272351c17c254", 0xbb}, 0x68) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:07 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/213, 0xd5, 0x1, &(0x7f0000000100)=""/79, 0x4f}, &(0x7f00000001c0)=0x40) mmap$dsp(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x0) mremap(&(0x7f0000d1f000/0x4000)=nil, 0x4000, 0x4000, 0xf, &(0x7f0000e29000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) 11:39:08 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 1) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) shmget(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/213, 0xd5, 0x1, &(0x7f0000000100)=""/79, 0x4f}, &(0x7f00000001c0)=0x40) mmap$dsp(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x0) mremap(&(0x7f0000d1f000/0x4000)=nil, 0x4000, 0x4000, 0xf, &(0x7f0000e29000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/213, 0xd5, 0x1, &(0x7f0000000100)=""/79, 0x4f}, &(0x7f00000001c0)=0x40) (async) mmap$dsp(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x0) (async) mremap(&(0x7f0000d1f000/0x4000)=nil, 0x4000, 0x4000, 0xf, &(0x7f0000e29000/0x4000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:08 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x6, 0x1000a, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x1, 0x6d, 0x0) [ 757.115129] FAULT_INJECTION: forcing a failure. [ 757.115129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.170996] CPU: 1 PID: 27531 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 757.178901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 757.188264] Call Trace: [ 757.190855] dump_stack+0x1b2/0x281 [ 757.194492] should_fail.cold+0x10a/0x149 [ 757.198654] __alloc_pages_nodemask+0x21e/0x2900 [ 757.203422] ? __lock_acquire+0x5fc/0x3f20 [ 757.207672] ? kernel_poison_pages+0x1b/0x250 [ 757.212206] ? preempt_count_add+0xaf/0x170 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x6, 0x1000a, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x1, 0x6d, 0x0) [ 757.216542] ? get_page_from_freelist+0x17db/0x25a0 [ 757.221582] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.226439] ? __lock_acquire+0x5fc/0x3f20 [ 757.230705] ? __lock_acquire+0x5fc/0x3f20 [ 757.234959] alloc_pages_current+0x155/0x260 [ 757.239376] __pmd_alloc+0x37/0x3f0 [ 757.243016] __handle_mm_fault+0x1398/0x4620 [ 757.247435] ? vm_insert_page+0x7c0/0x7c0 [ 757.251610] ? mark_held_locks+0xa6/0xf0 [ 757.255682] handle_mm_fault+0x455/0x9c0 [ 757.259756] __get_user_pages+0x4e9/0x1270 [ 757.264005] ? follow_page_mask+0x18a0/0x18a0 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x6, 0x1000a, 0x3) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000)=0x1, 0x6d, 0x0) [ 757.268514] ? lock_downgrade+0x740/0x740 [ 757.272666] ? vfs_write+0x35d/0x4d0 [ 757.276392] ? lock_acquire+0x170/0x3f0 [ 757.280375] get_user_pages+0x93/0xc0 [ 757.284206] SyS_get_mempolicy+0x51c/0xc20 [ 757.288480] ? SyS_write+0x14d/0x210 [ 757.292211] ? SyS_migrate_pages+0x6e0/0x6e0 [ 757.296711] ? __do_page_fault+0x159/0xad0 [ 757.300951] ? do_syscall_64+0x4c/0x640 [ 757.304933] ? SyS_migrate_pages+0x6e0/0x6e0 [ 757.309349] do_syscall_64+0x1d5/0x640 [ 757.313274] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 757.318465] RIP: 0033:0x7f6f865f90f9 [ 757.322182] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 757.329890] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 757.337157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.344430] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 757.351709] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 757.358981] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:08 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 2) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 4: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8af, 0x3b3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x6, 0x3, 0x80000000}}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/213, 0xd5, 0x1, &(0x7f0000000100)=""/79, 0x4f}, &(0x7f00000001c0)=0x40) mmap$dsp(&(0x7f0000c0a000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x0) mremap(&(0x7f0000d1f000/0x4000)=nil, 0x4000, 0x4000, 0xf, &(0x7f0000e29000/0x4000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xa, 0x0) 11:39:08 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8af, 0x3b3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x6, 0x3, 0x80000000}}) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xa, 0x0) 11:39:08 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xa, 0x0) [ 757.560937] FAULT_INJECTION: forcing a failure. [ 757.560937] name failslab, interval 1, probability 0, space 0, times 0 [ 757.584883] CPU: 1 PID: 27584 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 757.592792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 757.602157] Call Trace: [ 757.604765] dump_stack+0x1b2/0x281 [ 757.608415] should_fail.cold+0x10a/0x149 [ 757.612576] should_failslab+0xd6/0x130 [ 757.616571] kmem_cache_alloc+0x28e/0x3c0 [ 757.620736] __pmd_alloc+0xaf/0x3f0 [ 757.624378] __handle_mm_fault+0x1398/0x4620 [ 757.628798] ? vm_insert_page+0x7c0/0x7c0 [ 757.632979] ? mark_held_locks+0xa6/0xf0 [ 757.637056] handle_mm_fault+0x455/0x9c0 [ 757.641137] __get_user_pages+0x4e9/0x1270 [ 757.645399] ? follow_page_mask+0x18a0/0x18a0 [ 757.649907] ? lock_downgrade+0x740/0x740 [ 757.654067] ? vfs_write+0x35d/0x4d0 [ 757.657801] ? lock_acquire+0x170/0x3f0 [ 757.661788] get_user_pages+0x93/0xc0 [ 757.665600] SyS_get_mempolicy+0x51c/0xc20 [ 757.669853] ? SyS_write+0x14d/0x210 [ 757.673685] ? SyS_migrate_pages+0x6e0/0x6e0 [ 757.678102] ? __do_page_fault+0x159/0xad0 [ 757.682375] ? do_syscall_64+0x4c/0x640 [ 757.686356] ? SyS_migrate_pages+0x6e0/0x6e0 [ 757.690783] do_syscall_64+0x1d5/0x640 [ 757.694690] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 757.699918] RIP: 0033:0x7f6f865f90f9 [ 757.703635] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 757.711354] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 757.718626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.725904] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 757.733190] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 757.740469] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:08 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 3) 11:39:08 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f51000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x6, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180), 0xa, 0x0) 11:39:08 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8af, 0x3b3000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x6, 0x3, 0x80000000}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x6, 0x3, 0x80000000}}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000f51000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x6, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 2: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x48000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:08 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180), 0xa, 0x0) 11:39:08 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 757.878245] FAULT_INJECTION: forcing a failure. [ 757.878245] name failslab, interval 1, probability 0, space 0, times 0 11:39:08 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:08 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000f51000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x6, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 757.964967] CPU: 1 PID: 27613 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 757.972898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 757.982259] Call Trace: [ 757.984885] dump_stack+0x1b2/0x281 [ 757.988528] should_fail.cold+0x10a/0x149 [ 757.992685] should_failslab+0xd6/0x130 [ 757.996670] kmem_cache_alloc+0x28e/0x3c0 [ 758.000835] __anon_vma_prepare+0x5d/0x510 [ 758.005086] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 758.010200] ? __lockdep_init_map+0x100/0x560 [ 758.014705] ? prep_transhuge_page+0xa0/0xa0 [ 758.019122] ? _raw_spin_unlock+0x29/0x40 [ 758.023275] ? __pmd_alloc+0x27f/0x3f0 [ 758.027173] __handle_mm_fault+0x2ac4/0x4620 [ 758.031608] ? vm_insert_page+0x7c0/0x7c0 [ 758.035785] ? mark_held_locks+0xa6/0xf0 [ 758.039861] handle_mm_fault+0x455/0x9c0 [ 758.043935] __get_user_pages+0x4e9/0x1270 [ 758.048184] ? follow_page_mask+0x18a0/0x18a0 [ 758.052691] ? lock_downgrade+0x740/0x740 [ 758.056932] ? vfs_write+0x35d/0x4d0 [ 758.060666] ? lock_acquire+0x170/0x3f0 [ 758.064716] get_user_pages+0x93/0xc0 [ 758.068531] SyS_get_mempolicy+0x51c/0xc20 [ 758.072770] ? SyS_write+0x14d/0x210 [ 758.076508] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.080926] ? __do_page_fault+0x159/0xad0 [ 758.085174] ? do_syscall_64+0x4c/0x640 [ 758.089152] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.093567] do_syscall_64+0x1d5/0x640 [ 758.097818] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 758.103010] RIP: 0033:0x7f6f865f90f9 [ 758.106736] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef 11:39:09 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 4) 11:39:09 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180), 0xa, 0x0) 11:39:09 executing program 2: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x48000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x48000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) 11:39:09 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000e7f000/0x4000)=nil, 0x930, 0x2000008, 0x1010, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3e0d000000000000000008002c000000000008003a000200000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc055) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/213, 0xd5}, &(0x7f0000001140)=0x40) [ 758.114452] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 758.121727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.128997] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 758.136281] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 758.143554] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:09 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:09 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000e7f000/0x4000)=nil, 0x930, 0x2000008, 0x1010, 0xffffffffffffffff, 0x0) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$clear(0x7, r0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3e0d000000000000000008002c000000000008003a000200000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc055) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/213, 0xd5}, &(0x7f0000001140)=0x40) 11:39:09 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 2: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x48000) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x48000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) [ 758.298758] FAULT_INJECTION: forcing a failure. [ 758.298758] name failslab, interval 1, probability 0, space 0, times 0 [ 758.345420] CPU: 1 PID: 27652 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 758.353334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 758.362694] Call Trace: [ 758.365303] dump_stack+0x1b2/0x281 [ 758.368943] should_fail.cold+0x10a/0x149 [ 758.373109] should_failslab+0xd6/0x130 [ 758.377093] kmem_cache_alloc+0x28e/0x3c0 [ 758.381256] __anon_vma_prepare+0x2ae/0x510 [ 758.385618] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 758.390730] ? __lockdep_init_map+0x100/0x560 [ 758.395239] ? prep_transhuge_page+0xa0/0xa0 [ 758.399655] ? _raw_spin_unlock+0x29/0x40 [ 758.403816] ? __pmd_alloc+0x27f/0x3f0 [ 758.407712] __handle_mm_fault+0x2ac4/0x4620 [ 758.412130] ? vm_insert_page+0x7c0/0x7c0 [ 758.416298] ? mark_held_locks+0xa6/0xf0 [ 758.420377] handle_mm_fault+0x455/0x9c0 [ 758.424452] __get_user_pages+0x4e9/0x1270 [ 758.428703] ? follow_page_mask+0x18a0/0x18a0 [ 758.433217] ? lock_downgrade+0x740/0x740 [ 758.437370] ? vfs_write+0x35d/0x4d0 [ 758.441110] ? lock_acquire+0x170/0x3f0 [ 758.445096] get_user_pages+0x93/0xc0 [ 758.448918] SyS_get_mempolicy+0x51c/0xc20 [ 758.453161] ? SyS_write+0x14d/0x210 [ 758.456885] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.461352] ? __do_page_fault+0x159/0xad0 [ 758.465620] ? do_syscall_64+0x4c/0x640 [ 758.469601] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.474036] do_syscall_64+0x1d5/0x640 [ 758.477936] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 758.483127] RIP: 0033:0x7f6f865f90f9 [ 758.486838] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef 11:39:09 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 758.494551] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 758.501828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.509094] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 758.516382] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 758.523658] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:09 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 5) 11:39:09 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:09 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000a, 0x810, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$dsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x80010, 0xffffffffffffffff, 0x0) 11:39:09 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000e7f000/0x4000)=nil, 0x930, 0x2000008, 0x1010, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$clear(0x7, r0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3e0d000000000000000008002c000000000008003a000200000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc055) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/213, 0xd5}, &(0x7f0000001140)=0x40) 11:39:09 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000a, 0x810, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) mmap$dsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x80010, 0xffffffffffffffff, 0x0) 11:39:09 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:09 executing program 4: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:09 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x18f00000, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) [ 758.703407] FAULT_INJECTION: forcing a failure. [ 758.703407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:39:09 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x0) [ 758.791017] CPU: 1 PID: 27698 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 758.798939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 758.808384] Call Trace: [ 758.810986] dump_stack+0x1b2/0x281 [ 758.814625] should_fail.cold+0x10a/0x149 [ 758.818785] __alloc_pages_nodemask+0x21e/0x2900 [ 758.823566] ? trace_hardirqs_on+0x10/0x10 [ 758.827816] ? trace_hardirqs_on+0x10/0x10 [ 758.832064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 758.836924] ? trace_hardirqs_on+0x10/0x10 [ 758.841173] ? __anon_vma_prepare+0x281/0x510 [ 758.845685] ? lock_acquire+0x170/0x3f0 [ 758.849681] ? lock_downgrade+0x740/0x740 [ 758.853843] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 758.859309] alloc_pages_vma+0x4b3/0x6d0 [ 758.863467] do_huge_pmd_anonymous_page+0x2d6/0x1700 [ 758.868576] ? __lockdep_init_map+0x100/0x560 [ 758.873083] ? prep_transhuge_page+0xa0/0xa0 [ 758.877498] ? _raw_spin_unlock+0x29/0x40 [ 758.881647] ? __pmd_alloc+0x27f/0x3f0 [ 758.885544] __handle_mm_fault+0x2ac4/0x4620 [ 758.889968] ? vm_insert_page+0x7c0/0x7c0 [ 758.894137] ? mark_held_locks+0xa6/0xf0 [ 758.898211] handle_mm_fault+0x455/0x9c0 [ 758.902291] __get_user_pages+0x4e9/0x1270 [ 758.906553] ? follow_page_mask+0x18a0/0x18a0 [ 758.911056] ? lock_downgrade+0x740/0x740 [ 758.915212] ? vfs_write+0x35d/0x4d0 [ 758.918960] ? lock_acquire+0x170/0x3f0 [ 758.922943] get_user_pages+0x93/0xc0 [ 758.926751] SyS_get_mempolicy+0x51c/0xc20 [ 758.930987] ? SyS_write+0x14d/0x210 [ 758.934704] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.939118] ? __do_page_fault+0x159/0xad0 [ 758.943360] ? do_syscall_64+0x4c/0x640 [ 758.947335] ? SyS_migrate_pages+0x6e0/0x6e0 [ 758.951743] do_syscall_64+0x1d5/0x640 [ 758.955640] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 758.960844] RIP: 0033:0x7f6f865f90f9 [ 758.964558] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 758.972258] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 758.979518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 758.986784] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 758.994042] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 759.001307] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:10 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 6) 11:39:10 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000a, 0x810, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mmap$dsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x80010, 0xffffffffffffffff, 0x0) 11:39:10 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x18f00000, 0x4) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) 11:39:10 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000e7f000/0x4000)=nil, 0x930, 0x2000008, 0x1010, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3e0d000000000000000008002c000000000008003a000200000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc055) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/213, 0xd5}, &(0x7f0000001140)=0x40) 11:39:10 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:10 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:10 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mmap$KVM_VCPU(&(0x7f0000e7f000/0x4000)=nil, 0x930, 0x2000008, 0x1010, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$clear(0x7, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3e0d000000000000000008002c000000000008003a000200000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc055) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x0, &(0x7f0000001000)=""/213, 0xd5}, &(0x7f0000001140)=0x40) 11:39:10 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000180)=0x8001, 0xb, 0x7) 11:39:10 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:10 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:10 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 759.151954] FAULT_INJECTION: forcing a failure. [ 759.151954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:39:10 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x18f00000, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) [ 759.235573] CPU: 1 PID: 27745 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 759.243488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 759.252844] Call Trace: [ 759.255443] dump_stack+0x1b2/0x281 [ 759.259087] should_fail.cold+0x10a/0x149 [ 759.263252] __alloc_pages_nodemask+0x21e/0x2900 [ 759.268027] ? trace_hardirqs_on+0x10/0x10 [ 759.272277] ? trace_hardirqs_on+0x10/0x10 [ 759.276542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 759.281396] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 759.286173] ? refill_stock+0x260/0x260 [ 759.290172] ? lock_downgrade+0x740/0x740 [ 759.294336] ? get_mem_cgroup_from_mm+0x112/0x360 [ 759.299189] alloc_pages_current+0x155/0x260 [ 759.303656] ? mem_cgroup_try_charge+0x2db/0x840 [ 759.308435] pte_alloc_one+0x15/0x100 [ 759.312277] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 759.317401] ? prep_transhuge_page+0xa0/0xa0 [ 759.321844] ? _raw_spin_unlock+0x29/0x40 [ 759.326001] ? __pmd_alloc+0x27f/0x3f0 [ 759.329929] __handle_mm_fault+0x2ac4/0x4620 [ 759.334353] ? vm_insert_page+0x7c0/0x7c0 [ 759.338617] ? mark_held_locks+0xa6/0xf0 [ 759.342801] handle_mm_fault+0x455/0x9c0 [ 759.346877] __get_user_pages+0x4e9/0x1270 [ 759.351127] ? follow_page_mask+0x18a0/0x18a0 [ 759.355644] ? lock_downgrade+0x740/0x740 [ 759.359834] ? vfs_write+0x35d/0x4d0 [ 759.363578] ? lock_acquire+0x170/0x3f0 [ 759.367571] get_user_pages+0x93/0xc0 [ 759.371387] SyS_get_mempolicy+0x51c/0xc20 [ 759.375636] ? SyS_write+0x14d/0x210 [ 759.379366] ? SyS_migrate_pages+0x6e0/0x6e0 [ 759.383785] ? __do_page_fault+0x159/0xad0 [ 759.388028] ? do_syscall_64+0x4c/0x640 [ 759.392018] ? SyS_migrate_pages+0x6e0/0x6e0 [ 759.396445] do_syscall_64+0x1d5/0x640 [ 759.400351] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 759.405551] RIP: 0033:0x7f6f865f90f9 [ 759.409266] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 759.416988] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 759.424352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.431626] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 759.438909] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 759.446195] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 11:39:10 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 7) 11:39:10 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000180)=0x8001, 0xb, 0x7) 11:39:10 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:10 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x410000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r2 = getpid() move_pages(r2, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x9], 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10, 0x0, &(0x7f0000000140)=""/233, 0xe9}, &(0x7f0000000280)=0x40) move_pages(r2, 0x5, &(0x7f00000000c0)=[&(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ea3000/0x4000)=nil, &(0x7f0000ee5000/0x2000)=nil, &(0x7f0000d18000/0x4000)=nil, &(0x7f0000d04000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x1) 11:39:10 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:10 executing program 1: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:10 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000180)=0x8001, 0xb, 0x7) 11:39:10 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:10 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:10 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x410000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) r2 = getpid() move_pages(r2, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x9], 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10, 0x0, &(0x7f0000000140)=""/233, 0xe9}, &(0x7f0000000280)=0x40) (async) move_pages(r2, 0x5, &(0x7f00000000c0)=[&(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ea3000/0x4000)=nil, &(0x7f0000ee5000/0x2000)=nil, &(0x7f0000d18000/0x4000)=nil, &(0x7f0000d04000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x1) 11:39:10 executing program 1: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 759.602014] FAULT_INJECTION: forcing a failure. [ 759.602014] name failslab, interval 1, probability 0, space 0, times 0 [ 759.650574] CPU: 0 PID: 27790 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 [ 759.658508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 759.667871] Call Trace: [ 759.670487] dump_stack+0x1b2/0x281 [ 759.674150] should_fail.cold+0x10a/0x149 [ 759.678319] should_failslab+0xd6/0x130 [ 759.682308] kmem_cache_alloc+0x28e/0x3c0 [ 759.686470] ptlock_alloc+0x1d/0x70 [ 759.690158] pte_alloc_one+0x57/0x100 [ 759.693987] do_huge_pmd_anonymous_page+0x8fc/0x1700 11:39:10 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 1) [ 759.699110] ? prep_transhuge_page+0xa0/0xa0 [ 759.703525] ? _raw_spin_unlock+0x29/0x40 [ 759.707692] ? __pmd_alloc+0x27f/0x3f0 [ 759.711599] __handle_mm_fault+0x2ac4/0x4620 [ 759.716119] ? vm_insert_page+0x7c0/0x7c0 [ 759.720290] ? mark_held_locks+0xa6/0xf0 [ 759.724365] handle_mm_fault+0x455/0x9c0 [ 759.728445] __get_user_pages+0x4e9/0x1270 [ 759.732712] ? follow_page_mask+0x18a0/0x18a0 [ 759.737224] ? lock_downgrade+0x740/0x740 [ 759.741382] ? vfs_write+0x35d/0x4d0 [ 759.745108] ? lock_acquire+0x170/0x3f0 [ 759.749095] get_user_pages+0x93/0xc0 [ 759.752911] SyS_get_mempolicy+0x51c/0xc20 [ 759.757158] ? SyS_write+0x14d/0x210 [ 759.760889] ? SyS_migrate_pages+0x6e0/0x6e0 [ 759.765314] ? __do_page_fault+0x159/0xad0 [ 759.769566] ? do_syscall_64+0x4c/0x640 [ 759.773556] ? SyS_migrate_pages+0x6e0/0x6e0 [ 759.777975] do_syscall_64+0x1d5/0x640 [ 759.781882] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 759.787080] RIP: 0033:0x7f6f865f90f9 [ 759.790800] RSP: 002b:00007f6f84b6b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 759.798517] RAX: ffffffffffffffda RBX: 00007f6f86718f80 RCX: 00007f6f865f90f9 [ 759.805929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.813209] RBP: 00007f6f84b6b1d0 R08: 0000000000000003 R09: 0000000000000000 [ 759.820483] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 759.827761] R13: 00007ffcf764261f R14: 00007f6f84b6b300 R15: 0000000000022000 [ 759.849837] FAULT_INJECTION: forcing a failure. [ 759.849837] name failslab, interval 1, probability 0, space 0, times 0 [ 759.870479] CPU: 0 PID: 27814 Comm: syz-executor.1 Not tainted 4.14.307-syzkaller #0 [ 759.878484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 759.887856] Call Trace: [ 759.890460] dump_stack+0x1b2/0x281 [ 759.894119] should_fail.cold+0x10a/0x149 [ 759.898268] should_failslab+0xd6/0x130 [ 759.902252] kmem_cache_alloc+0x28e/0x3c0 [ 759.906404] __anon_vma_prepare+0x5d/0x510 [ 759.910651] ? __lock_acquire+0x5fc/0x3f20 [ 759.914892] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 759.919996] ? __might_fault+0x104/0x1b0 [ 759.924050] ? prep_transhuge_page+0xa0/0xa0 [ 759.928459] __handle_mm_fault+0x2ac4/0x4620 [ 759.932871] ? follow_page_pte+0xb21/0x14c0 [ 759.937194] ? vm_insert_page+0x7c0/0x7c0 [ 759.941346] ? mark_held_locks+0xa6/0xf0 [ 759.945404] handle_mm_fault+0x455/0x9c0 [ 759.949465] __do_page_fault+0x549/0xad0 [ 759.953540] ? spurious_fault+0x640/0x640 [ 759.957680] ? do_page_fault+0x60/0x500 [ 759.961648] page_fault+0x25/0x50 [ 759.965092] RIP: 0010:__clear_user+0x3d/0x60 [ 759.969489] RSP: 0018:ffff8880850afe28 EFLAGS: 00050202 [ 759.974844] RAX: 0000000000000000 RBX: 00000000000001ef RCX: 00000000000001ef [ 759.982105] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000088 [ 759.989366] RBP: 0000000020000088 R08: ffffffff8b9c6678 R09: 0000000000000000 [ 759.996625] R10: 0000000000000000 R11: ffff8880b5546140 R12: 0000000020000088 [ 760.003901] R13: 0000000020001000 R14: 0000000000000f80 R15: 0000000000000000 [ 760.011179] ? __clear_user+0x1e/0x60 [ 760.014974] clear_user+0x74/0xb0 [ 760.018425] SyS_get_mempolicy+0x4e8/0xc20 [ 760.022656] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.027058] ? __do_page_fault+0x159/0xad0 [ 760.031286] ? do_syscall_64+0x4c/0x640 [ 760.035272] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.039673] do_syscall_64+0x1d5/0x640 [ 760.043559] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 760.048743] RIP: 0033:0x7ff12bf9f0f9 11:39:11 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 8) 11:39:11 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="05001e000000000008000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="05001e0001000000500020800800040006000000080004000000000008000100010000000c0005000800000000000000100003800c0004000201aaaaaaaaaaaa0800010002000000080004000600000008000400010000000c000600020000000200000008001f000500000008001f0001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x8000000000006, 0xa, 0x6) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xfffffffeffffffff, 0x7, 0x3) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0x0) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:11 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:11 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x410000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) r2 = getpid() move_pages(r2, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x9], 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/16, 0x10, 0x0, &(0x7f0000000140)=""/233, 0xe9}, &(0x7f0000000280)=0x40) move_pages(r2, 0x5, &(0x7f00000000c0)=[&(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ea3000/0x4000)=nil, &(0x7f0000ee5000/0x2000)=nil, &(0x7f0000d18000/0x4000)=nil, &(0x7f0000d04000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x1) 11:39:11 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 2) [ 760.052459] RSP: 002b:00007ff12a4cf168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 760.060165] RAX: ffffffffffffffda RBX: 00007ff12c0bf120 RCX: 00007ff12bf9f0f9 [ 760.067429] RDX: 0000000000007bd1 RSI: 0000000020000080 RDI: 0000000000000000 [ 760.074691] RBP: 00007ff12a4cf1d0 R08: 0000000000000003 R09: 0000000000000000 [ 760.081956] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 760.089236] R13: 00007ffc787df6af R14: 00007ff12a4cf300 R15: 0000000000022000 11:39:11 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="05001e000000000008000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="05001e0001000000500020800800040006000000080004000000000008000100010000000c0005000800000000000000100003800c0004000201aaaaaaaaaaaa0800010002000000080004000600000008000400010000000c000600020000000200000008001f000500000008001f0001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x8000000000006, 0xa, 0x6) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xfffffffeffffffff, 0x7, 0x3) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0x0) 11:39:11 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:11 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000d8f000/0x4000)=nil, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ec8000/0x3000)=nil}) mremap(&(0x7f0000c68000/0x3000)=nil, 0x3000, 0x10000, 0x7, &(0x7f0000efc000/0x10000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/159) mmap$snddsp(&(0x7f0000fb5000/0x3000)=nil, 0x3000, 0x4, 0x80a05b8d9e818b74, 0xffffffffffffffff, 0x1000) 11:39:11 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:11 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$snddsp(&(0x7f0000d54000/0x2000)=nil, 0x2000, 0x1000004, 0x50, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x85, 0x2, 0x7, 0x3f, 0x0, 0x6, 0x20000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x82402, 0x7f, 0x21, 0x2, 0x8, 0x100, 0xcf9d, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000f63000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x5) [ 760.190757] FAULT_INJECTION: forcing a failure. [ 760.190757] name failslab, interval 1, probability 0, space 0, times 0 11:39:11 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="05001e000000000008000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="05001e0001000000500020800800040006000000080004000000000008000100010000000c0005000800000000000000100003800c0004000201aaaaaaaaaaaa0800010002000000080004000600000008000400010000000c000600020000000200000008001f000500000008001f0001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x8000000000006, 0xa, 0x6) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0xfffffffeffffffff, 0x7, 0x3) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1010, r1, 0x0) 11:39:11 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x12716, 0x0, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 760.256940] CPU: 1 PID: 27828 Comm: syz-executor.1 Not tainted 4.14.307-syzkaller #0 [ 760.264864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 760.274261] Call Trace: [ 760.276862] dump_stack+0x1b2/0x281 [ 760.280507] should_fail.cold+0x10a/0x149 [ 760.284674] should_failslab+0xd6/0x130 [ 760.288662] kmem_cache_alloc+0x28e/0x3c0 [ 760.292830] __anon_vma_prepare+0x2ae/0x510 [ 760.297161] ? __lock_acquire+0x5fc/0x3f20 [ 760.301411] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 760.306789] ? __might_fault+0x104/0x1b0 [ 760.310859] ? prep_transhuge_page+0xa0/0xa0 [ 760.315306] __handle_mm_fault+0x2ac4/0x4620 [ 760.319727] ? follow_page_pte+0xb21/0x14c0 [ 760.324095] ? vm_insert_page+0x7c0/0x7c0 [ 760.328273] ? mark_held_locks+0xa6/0xf0 [ 760.332345] handle_mm_fault+0x455/0x9c0 [ 760.336433] __do_page_fault+0x549/0xad0 [ 760.340537] ? spurious_fault+0x640/0x640 [ 760.344694] ? do_page_fault+0x60/0x500 [ 760.348683] page_fault+0x25/0x50 [ 760.352148] RIP: 0010:__clear_user+0x3d/0x60 [ 760.356556] RSP: 0018:ffff888079a2fe28 EFLAGS: 00050202 [ 760.361926] RAX: 0000000000000000 RBX: 00000000000001ef RCX: 00000000000001ef [ 760.369211] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000088 [ 760.376630] RBP: 0000000020000088 R08: ffffffff8b9c6678 R09: 0000000000000000 [ 760.383915] R10: 0000000000000000 R11: ffff8880a2f52500 R12: 0000000020000088 [ 760.391214] R13: 0000000020001000 R14: 0000000000000f80 R15: 0000000000000000 [ 760.398517] ? __clear_user+0x1e/0x60 [ 760.402327] clear_user+0x74/0xb0 [ 760.405801] SyS_get_mempolicy+0x4e8/0xc20 [ 760.410052] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.414470] ? __do_page_fault+0x159/0xad0 [ 760.418713] ? do_syscall_64+0x4c/0x640 [ 760.422698] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.427119] do_syscall_64+0x1d5/0x640 [ 760.431023] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 760.436221] RIP: 0033:0x7ff12bf9f0f9 [ 760.439942] RSP: 002b:00007ff12a511168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 760.447661] RAX: ffffffffffffffda RBX: 00007ff12c0bef80 RCX: 00007ff12bf9f0f9 11:39:11 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000d8f000/0x4000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000d8f000/0x4000)=nil, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ec8000/0x3000)=nil}) mremap(&(0x7f0000c68000/0x3000)=nil, 0x3000, 0x10000, 0x7, &(0x7f0000efc000/0x10000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/159) (async) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/159) mmap$snddsp(&(0x7f0000fb5000/0x3000)=nil, 0x3000, 0x4, 0x80a05b8d9e818b74, 0xffffffffffffffff, 0x1000) 11:39:11 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 760.454945] RDX: 0000000000007bd1 RSI: 0000000020000080 RDI: 0000000000000000 [ 760.462221] RBP: 00007ff12a5111d0 R08: 0000000000000003 R09: 0000000000000000 [ 760.469496] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 760.476804] R13: 00007ffc787df6af R14: 00007ff12a511300 R15: 0000000000022000 11:39:11 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 3) 11:39:11 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x12716, 0x0, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) 11:39:11 executing program 3: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:11 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$snddsp(&(0x7f0000d54000/0x2000)=nil, 0x2000, 0x1000004, 0x50, 0xffffffffffffffff, 0x3000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x85, 0x2, 0x7, 0x3f, 0x0, 0x6, 0x20000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x82402, 0x7f, 0x21, 0x2, 0x8, 0x100, 0xcf9d, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000f63000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x5) 11:39:11 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000d8f000/0x4000)=nil, 0x3) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ec8000/0x3000)=nil}) (async) mremap(&(0x7f0000c68000/0x3000)=nil, 0x3000, 0x10000, 0x7, &(0x7f0000efc000/0x10000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/159) (async) mmap$snddsp(&(0x7f0000fb5000/0x3000)=nil, 0x3000, 0x4, 0x80a05b8d9e818b74, 0xffffffffffffffff, 0x1000) 11:39:11 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mremap(&(0x7f0000d91000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c8c000/0x3000)=nil) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:11 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x12716, 0x0, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) 11:39:11 executing program 3: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$snddsp(&(0x7f0000d54000/0x2000)=nil, 0x2000, 0x1000004, 0x50, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x85, 0x2, 0x7, 0x3f, 0x0, 0x6, 0x20000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x82402, 0x7f, 0x21, 0x2, 0x8, 0x100, 0xcf9d, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000f63000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x5) 11:39:11 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) 11:39:11 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (fail_nth: 1) [ 760.596980] FAULT_INJECTION: forcing a failure. [ 760.596980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.678693] CPU: 0 PID: 27890 Comm: syz-executor.1 Not tainted 4.14.307-syzkaller #0 [ 760.686648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 760.696009] Call Trace: [ 760.698618] dump_stack+0x1b2/0x281 [ 760.702268] should_fail.cold+0x10a/0x149 [ 760.706449] __alloc_pages_nodemask+0x21e/0x2900 [ 760.711269] ? trace_hardirqs_on+0x10/0x10 [ 760.715521] ? trace_hardirqs_on+0x10/0x10 [ 760.719779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 760.724641] ? __lock_acquire+0x5fc/0x3f20 [ 760.728894] ? __anon_vma_prepare+0x281/0x510 [ 760.733403] ? lock_acquire+0x170/0x3f0 [ 760.737392] ? lock_downgrade+0x740/0x740 [ 760.741556] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 760.747028] alloc_pages_vma+0x4b3/0x6d0 [ 760.751120] do_huge_pmd_anonymous_page+0x2d6/0x1700 [ 760.756287] ? __might_fault+0x104/0x1b0 [ 760.760372] ? prep_transhuge_page+0xa0/0xa0 [ 760.764846] __handle_mm_fault+0x2ac4/0x4620 [ 760.769273] ? follow_page_pte+0xb21/0x14c0 [ 760.773621] ? vm_insert_page+0x7c0/0x7c0 [ 760.777799] ? mark_held_locks+0xa6/0xf0 [ 760.781883] handle_mm_fault+0x455/0x9c0 [ 760.785962] __do_page_fault+0x549/0xad0 [ 760.790058] ? spurious_fault+0x640/0x640 [ 760.794222] ? do_page_fault+0x60/0x500 [ 760.798215] page_fault+0x25/0x50 [ 760.801684] RIP: 0010:__clear_user+0x3d/0x60 [ 760.806096] RSP: 0018:ffff88807b83fe28 EFLAGS: 00050202 [ 760.811478] RAX: 0000000000000000 RBX: 00000000000001ef RCX: 00000000000001ef [ 760.818759] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000088 [ 760.826038] RBP: 0000000020000088 R08: ffffffff8b9c6678 R09: 0000000000000000 [ 760.833330] R10: 0000000000000000 R11: ffff88808407c5c0 R12: 0000000020000088 [ 760.840617] R13: 0000000020001000 R14: 0000000000000f80 R15: 0000000000000000 [ 760.847928] ? __clear_user+0x1e/0x60 [ 760.851749] clear_user+0x74/0xb0 [ 760.855225] SyS_get_mempolicy+0x4e8/0xc20 [ 760.859478] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.863902] ? __do_page_fault+0x159/0xad0 [ 760.868237] ? do_syscall_64+0x4c/0x640 [ 760.872224] ? SyS_migrate_pages+0x6e0/0x6e0 [ 760.876644] do_syscall_64+0x1d5/0x640 [ 760.880554] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 760.885752] RIP: 0033:0x7ff12bf9f0f9 [ 760.889464] RSP: 002b:00007ff12a511168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 760.897161] RAX: ffffffffffffffda RBX: 00007ff12c0bef80 RCX: 00007ff12bf9f0f9 [ 760.904417] RDX: 0000000000007bd1 RSI: 0000000020000080 RDI: 0000000000000000 [ 760.911691] RBP: 00007ff12a5111d0 R08: 0000000000000003 R09: 0000000000000000 [ 760.918951] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 760.926211] R13: 00007ffc787df6af R14: 00007ff12a511300 R15: 0000000000022000 11:39:12 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 4) 11:39:12 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$snddsp(&(0x7f0000d54000/0x2000)=nil, 0x2000, 0x1000004, 0x50, 0xffffffffffffffff, 0x3000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x85, 0x2, 0x7, 0x3f, 0x0, 0x6, 0x20000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x82402, 0x7f, 0x21, 0x2, 0x8, 0x100, 0xcf9d, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x10) mmap$perf(&(0x7f0000f63000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x5) 11:39:12 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mremap(&(0x7f0000d91000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c8c000/0x3000)=nil) 11:39:12 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 1) 11:39:12 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8, 0xa, 0x0) [ 760.952209] FAULT_INJECTION: forcing a failure. [ 760.952209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.967170] CPU: 1 PID: 27915 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 760.975080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 760.984533] Call Trace: [ 760.987138] dump_stack+0x1b2/0x281 [ 760.990791] should_fail.cold+0x10a/0x149 [ 760.994961] __alloc_pages_nodemask+0x21e/0x2900 11:39:12 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8, 0xa, 0x0) [ 760.999742] ? __lock_acquire+0x5fc/0x3f20 [ 761.004000] ? __lock_acquire+0x5fc/0x3f20 [ 761.008255] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 761.013119] ? __lock_acquire+0x5fc/0x3f20 [ 761.017381] ? __lock_acquire+0x5fc/0x3f20 [ 761.021632] alloc_pages_vma+0xd2/0x6d0 [ 761.025803] __handle_mm_fault+0x25fa/0x4620 [ 761.030234] ? lock_downgrade+0x740/0x740 [ 761.034399] ? vm_insert_page+0x7c0/0x7c0 [ 761.038656] ? do_raw_spin_unlock+0x164/0x220 [ 761.043191] ? mark_held_locks+0xa6/0xf0 [ 761.047270] handle_mm_fault+0x455/0x9c0 [ 761.051354] __get_user_pages+0x4e9/0x1270 [ 761.055696] ? follow_page_mask+0x18a0/0x18a0 [ 761.060220] ? lock_acquire+0x170/0x3f0 [ 761.064217] populate_vma_page_range+0x17b/0x210 [ 761.068989] __mm_populate+0x195/0x2c0 [ 761.072918] ? populate_vma_page_range+0x210/0x210 [ 761.077925] do_mlock+0x23c/0x5e0 [ 761.081484] ? __do_page_fault+0x159/0xad0 [ 761.085734] ? apply_mlockall_flags+0x480/0x480 [ 761.090422] SyS_mlock+0x1e/0x30 [ 761.093896] do_syscall_64+0x1d5/0x640 [ 761.097801] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 761.103002] RIP: 0033:0x7ff767bdd0f9 [ 761.106726] RSP: 002b:00007ff76612e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 761.109167] FAULT_INJECTION: forcing a failure. [ 761.109167] name failslab, interval 1, probability 0, space 0, times 0 [ 761.114442] RAX: ffffffffffffffda RBX: 00007ff767cfd050 RCX: 00007ff767bdd0f9 [ 761.114450] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 761.114458] RBP: 00007ff76612e1d0 R08: 0000000000000000 R09: 0000000000000000 11:39:12 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mremap(&(0x7f0000d91000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c8c000/0x3000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mremap(&(0x7f0000d91000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000c8c000/0x3000)=nil) (async) 11:39:12 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8, 0xa, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8, 0xa, 0x0) (async) [ 761.114465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.114472] R13: 00007ffc15988e1f R14: 00007ff76612e300 R15: 0000000000022000 [ 761.152580] FAULT_INJECTION: forcing a failure. [ 761.152580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.184764] CPU: 1 PID: 27944 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 761.192688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 11:39:12 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 761.202050] Call Trace: [ 761.204655] dump_stack+0x1b2/0x281 [ 761.208311] should_fail.cold+0x10a/0x149 [ 761.212486] __alloc_pages_nodemask+0x21e/0x2900 [ 761.217273] ? __lock_acquire+0x5fc/0x3f20 [ 761.221539] ? kernel_poison_pages+0x1b/0x250 [ 761.226061] ? preempt_count_add+0xaf/0x170 [ 761.230403] ? get_page_from_freelist+0x17db/0x25a0 [ 761.235446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 761.240304] ? __lock_acquire+0x5fc/0x3f20 [ 761.244574] ? __lock_acquire+0x5fc/0x3f20 [ 761.248833] alloc_pages_current+0x155/0x260 [ 761.253261] __pmd_alloc+0x37/0x3f0 [ 761.256905] __handle_mm_fault+0x1398/0x4620 [ 761.261341] ? vm_insert_page+0x7c0/0x7c0 [ 761.265530] ? mark_held_locks+0xa6/0xf0 [ 761.269660] handle_mm_fault+0x455/0x9c0 [ 761.273747] __get_user_pages+0x4e9/0x1270 [ 761.278011] ? follow_page_mask+0x18a0/0x18a0 [ 761.282523] ? lock_downgrade+0x740/0x740 [ 761.286689] ? vfs_write+0x35d/0x4d0 [ 761.290425] ? lock_acquire+0x170/0x3f0 [ 761.294422] get_user_pages+0x93/0xc0 [ 761.298243] SyS_get_mempolicy+0x51c/0xc20 11:39:12 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) (async) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 761.302506] ? SyS_write+0x14d/0x210 [ 761.306236] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.310657] ? __do_page_fault+0x159/0xad0 [ 761.314905] ? do_syscall_64+0x4c/0x640 [ 761.318890] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.323310] do_syscall_64+0x1d5/0x640 [ 761.327220] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 761.332416] RIP: 0033:0x7f690ef910f9 [ 761.336135] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 761.343859] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 761.351315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.358604] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 761.365912] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 761.373232] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 [ 761.380527] CPU: 0 PID: 27941 Comm: syz-executor.1 Not tainted 4.14.307-syzkaller #0 [ 761.388474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 761.397843] Call Trace: [ 761.400447] dump_stack+0x1b2/0x281 [ 761.404097] should_fail.cold+0x10a/0x149 [ 761.408266] should_failslab+0xd6/0x130 [ 761.412254] kmem_cache_alloc+0x28e/0x3c0 [ 761.416420] __anon_vma_prepare+0x2ae/0x510 [ 761.420758] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 761.425880] ? __lockdep_init_map+0x100/0x560 [ 761.430388] ? prep_transhuge_page+0xa0/0xa0 [ 761.434807] ? _raw_spin_unlock+0x29/0x40 [ 761.438994] ? __pmd_alloc+0x27f/0x3f0 [ 761.442891] __handle_mm_fault+0x2ac4/0x4620 [ 761.447325] ? vm_insert_page+0x7c0/0x7c0 [ 761.451495] ? mark_held_locks+0xa6/0xf0 [ 761.455579] handle_mm_fault+0x455/0x9c0 [ 761.459635] __get_user_pages+0x4e9/0x1270 [ 761.463873] ? follow_page_mask+0x18a0/0x18a0 [ 761.468361] ? lock_downgrade+0x740/0x740 [ 761.472508] ? vfs_write+0x35d/0x4d0 [ 761.476223] ? lock_acquire+0x170/0x3f0 [ 761.480191] get_user_pages+0x93/0xc0 [ 761.483982] SyS_get_mempolicy+0x51c/0xc20 [ 761.488226] ? SyS_write+0x14d/0x210 [ 761.491939] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.496338] ? __do_page_fault+0x159/0xad0 [ 761.500562] ? do_syscall_64+0x4c/0x640 [ 761.504525] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.508922] do_syscall_64+0x1d5/0x640 [ 761.512808] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 761.517985] RIP: 0033:0x7ff12bf9f0f9 [ 761.521682] RSP: 002b:00007ff12a4cf168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 761.529380] RAX: ffffffffffffffda RBX: 00007ff12c0bf120 RCX: 00007ff12bf9f0f9 [ 761.536658] RDX: 0000000000007bd1 RSI: 0000000020000080 RDI: 0000000000000000 [ 761.543944] RBP: 00007ff12a4cf1d0 R08: 0000000000000003 R09: 0000000000000000 11:39:12 executing program 2: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000180)=0x4, 0x20000d8, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 11:39:12 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (fail_nth: 2) 11:39:12 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 5) 11:39:12 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 2) 11:39:12 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:12 executing program 0: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:12 executing program 2: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000180)=0x4, 0x20000d8, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) [ 761.551213] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 761.558485] R13: 00007ffc787df6af R14: 00007ff12a4cf300 R15: 0000000000022000 11:39:12 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:12 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 761.643755] FAULT_INJECTION: forcing a failure. [ 761.643755] name failslab, interval 1, probability 0, space 0, times 0 [ 761.655830] FAULT_INJECTION: forcing a failure. [ 761.655830] name failslab, interval 1, probability 0, space 0, times 0 11:39:12 executing program 2: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000180)=0x4, 0x20000d8, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 11:39:12 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 761.692283] CPU: 1 PID: 27973 Comm: syz-executor.1 Not tainted 4.14.307-syzkaller #0 [ 761.700358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 761.709722] Call Trace: [ 761.712326] dump_stack+0x1b2/0x281 [ 761.715970] should_fail.cold+0x10a/0x149 [ 761.720141] should_failslab+0xd6/0x130 [ 761.724128] kmem_cache_alloc+0x28e/0x3c0 [ 761.728293] ptlock_alloc+0x1d/0x70 [ 761.731941] pte_alloc_one+0x57/0x100 [ 761.735762] do_huge_pmd_anonymous_page+0x8fc/0x1700 11:39:12 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 761.740880] ? __might_fault+0x104/0x1b0 [ 761.744973] ? prep_transhuge_page+0xa0/0xa0 [ 761.749392] __handle_mm_fault+0x2ac4/0x4620 [ 761.753842] ? follow_page_pte+0xb21/0x14c0 [ 761.758204] ? vm_insert_page+0x7c0/0x7c0 [ 761.762430] ? mark_held_locks+0xa6/0xf0 [ 761.766590] handle_mm_fault+0x455/0x9c0 [ 761.770671] __do_page_fault+0x549/0xad0 [ 761.774745] ? spurious_fault+0x640/0x640 [ 761.779002] ? do_page_fault+0x60/0x500 [ 761.782984] page_fault+0x25/0x50 [ 761.786449] RIP: 0010:__clear_user+0x3d/0x60 11:39:12 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 761.790883] RSP: 0018:ffff88809753fe28 EFLAGS: 00050202 [ 761.796337] RAX: 0000000000000000 RBX: 00000000000001ef RCX: 00000000000001ef [ 761.803615] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000088 [ 761.811018] RBP: 0000000020000088 R08: ffffffff8b9c6678 R09: 0000000000000000 [ 761.818296] R10: 0000000000000000 R11: ffff888097c62200 R12: 0000000020000088 [ 761.825572] R13: 0000000020001000 R14: 0000000000000f80 R15: 0000000000000000 [ 761.832873] ? __clear_user+0x1e/0x60 [ 761.836677] clear_user+0x74/0xb0 11:39:12 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 761.840139] SyS_get_mempolicy+0x4e8/0xc20 [ 761.844383] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.848799] ? __do_page_fault+0x159/0xad0 [ 761.853045] ? do_syscall_64+0x4c/0x640 [ 761.857019] ? SyS_migrate_pages+0x6e0/0x6e0 [ 761.861433] do_syscall_64+0x1d5/0x640 [ 761.865338] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 761.870531] RIP: 0033:0x7ff12bf9f0f9 [ 761.874253] RSP: 002b:00007ff12a511168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 761.881968] RAX: ffffffffffffffda RBX: 00007ff12c0bef80 RCX: 00007ff12bf9f0f9 [ 761.889248] RDX: 0000000000007bd1 RSI: 0000000020000080 RDI: 0000000000000000 [ 761.896523] RBP: 00007ff12a5111d0 R08: 0000000000000003 R09: 0000000000000000 [ 761.903796] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 761.911075] R13: 00007ffc787df6af R14: 00007ff12a511300 R15: 0000000000022000 [ 761.926315] CPU: 0 PID: 27977 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 761.934312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 761.943671] Call Trace: [ 761.946271] dump_stack+0x1b2/0x281 [ 761.949912] should_fail.cold+0x10a/0x149 [ 761.954073] should_failslab+0xd6/0x130 [ 761.958389] kmem_cache_alloc+0x28e/0x3c0 [ 761.962554] __pmd_alloc+0xaf/0x3f0 [ 761.966193] __handle_mm_fault+0x1398/0x4620 [ 761.970612] ? vm_insert_page+0x7c0/0x7c0 [ 761.974783] ? mark_held_locks+0xa6/0xf0 [ 761.978864] handle_mm_fault+0x455/0x9c0 [ 761.982945] __get_user_pages+0x4e9/0x1270 [ 761.987202] ? follow_page_mask+0x18a0/0x18a0 [ 761.991709] ? lock_downgrade+0x740/0x740 [ 761.995875] ? vfs_write+0x35d/0x4d0 [ 761.999609] ? lock_acquire+0x170/0x3f0 [ 762.003607] get_user_pages+0x93/0xc0 [ 762.007420] SyS_get_mempolicy+0x51c/0xc20 [ 762.011665] ? SyS_write+0x14d/0x210 [ 762.015501] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.019922] ? __do_page_fault+0x159/0xad0 [ 762.024175] ? do_syscall_64+0x4c/0x640 [ 762.028164] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.032590] do_syscall_64+0x1d5/0x640 [ 762.036498] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 6) 11:39:13 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 3) 11:39:13 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x9, 0xa, 0x6) 11:39:13 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000f87000/0x1000)=nil}) shmget(0x3, 0x1000, 0x2, &(0x7f0000de2000/0x1000)=nil) [ 762.041696] RIP: 0033:0x7f690ef910f9 [ 762.045460] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 762.053185] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 762.060463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.067760] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 762.075038] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 762.082316] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:13 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff9000/0x4000)=nil) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:39:13 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ebf000/0x2000)=nil, 0x930, 0x487da0cc1dea35b4, 0x20010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c81000/0x1000)=nil, 0x1000}, 0x1}) 11:39:13 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000f87000/0x1000)=nil}) (async) shmget(0x3, 0x1000, 0x2, &(0x7f0000de2000/0x1000)=nil) 11:39:13 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x9, 0xa, 0x6) [ 762.181183] FAULT_INJECTION: forcing a failure. [ 762.181183] name failslab, interval 1, probability 0, space 0, times 0 11:39:13 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x5, 0x2}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x5c, 0x2a, [@tim={0x5, 0x56, {0x0, 0xcb, 0xc0, "e797b2c277db18732da1072363fb209cd8fdb30d05bfba3db7fb3aa8e7468bf494fd1992134e00b94795815122c357dc53705b621e1e5a1a21528dfd26c2798cb11fd6056129739a20e0768ff1b5b7222ca118"}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3ff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40088d1}, 0x8000) 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ebf000/0x2000)=nil, 0x930, 0x487da0cc1dea35b4, 0x20010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c81000/0x1000)=nil, 0x1000}, 0x1}) [ 762.252010] CPU: 0 PID: 28021 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 762.259938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 762.269305] Call Trace: [ 762.272084] dump_stack+0x1b2/0x281 [ 762.275738] should_fail.cold+0x10a/0x149 [ 762.279905] should_failslab+0xd6/0x130 [ 762.283893] kmem_cache_alloc+0x28e/0x3c0 [ 762.288065] __anon_vma_prepare+0x5d/0x510 [ 762.292319] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 762.297446] ? __lockdep_init_map+0x100/0x560 [ 762.301959] ? prep_transhuge_page+0xa0/0xa0 [ 762.306388] ? _raw_spin_unlock+0x29/0x40 [ 762.310552] ? __pmd_alloc+0x27f/0x3f0 [ 762.314451] __handle_mm_fault+0x2ac4/0x4620 [ 762.318881] ? vm_insert_page+0x7c0/0x7c0 [ 762.323059] ? mark_held_locks+0xa6/0xf0 [ 762.327139] handle_mm_fault+0x455/0x9c0 [ 762.331218] __get_user_pages+0x4e9/0x1270 [ 762.335471] ? follow_page_mask+0x18a0/0x18a0 [ 762.339978] ? lock_downgrade+0x740/0x740 [ 762.344135] ? vfs_write+0x35d/0x4d0 [ 762.347864] ? lock_acquire+0x170/0x3f0 [ 762.351852] get_user_pages+0x93/0xc0 [ 762.355674] SyS_get_mempolicy+0x51c/0xc20 [ 762.359928] ? SyS_write+0x14d/0x210 [ 762.363654] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.368070] ? __do_page_fault+0x159/0xad0 [ 762.372313] ? do_syscall_64+0x4c/0x640 [ 762.376319] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.380773] do_syscall_64+0x1d5/0x640 [ 762.384709] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 762.390043] RIP: 0033:0x7f690ef910f9 [ 762.393772] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef 11:39:13 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x5, 0x2}) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x5c, 0x2a, [@tim={0x5, 0x56, {0x0, 0xcb, 0xc0, "e797b2c277db18732da1072363fb209cd8fdb30d05bfba3db7fb3aa8e7468bf494fd1992134e00b94795815122c357dc53705b621e1e5a1a21528dfd26c2798cb11fd6056129739a20e0768ff1b5b7222ca118"}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3ff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40088d1}, 0x8000) [ 762.401491] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 762.408751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.416041] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 762.423307] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 762.430575] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:13 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 4) 11:39:13 executing program 2: mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x9, 0xa, 0x6) 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async, rerun: 64) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 64) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:13 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000f87000/0x1000)=nil}) (rerun: 32) shmget(0x3, 0x1000, 0x2, &(0x7f0000de2000/0x1000)=nil) 11:39:13 executing program 5: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x5, 0x2}) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x5c, 0x2a, [@tim={0x5, 0x56, {0x0, 0xcb, 0xc0, "e797b2c277db18732da1072363fb209cd8fdb30d05bfba3db7fb3aa8e7468bf494fd1992134e00b94795815122c357dc53705b621e1e5a1a21528dfd26c2798cb11fd6056129739a20e0768ff1b5b7222ca118"}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3ff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40088d1}, 0x8000) 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000ebf000/0x2000)=nil, 0x930, 0x487da0cc1dea35b4, 0x20010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c81000/0x1000)=nil, 0x1000}, 0x1}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$KVM_VCPU(&(0x7f0000ebf000/0x2000)=nil, 0x930, 0x487da0cc1dea35b4, 0x20010, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000c81000/0x1000)=nil, 0x1000}, 0x1}) (async) 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 11:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80082600}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfffffffb, 0x2, {{0x37, 0x4, 0x3, 0x3, 0xdc, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x0, [{@empty, 0xc95}, {@multicast2, 0x7}, {@broadcast, 0x101}]}, @noop, @generic={0x94, 0x8, "cbecaf24c8eb"}, @cipso={0x86, 0x24, 0x2, [{0x5, 0xe, "87d2cfbdb27b0090f52f52ef"}, {0x6, 0x10, "50d7b36b3ca3f36faa56a1675046"}]}, @timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x2, [{@broadcast, 0xb9}, {@local, 0x4b}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x28, 0x3c, 0x0, 0x6, [0x67800000, 0x0, 0xffffffff, 0x9a52, 0xfffffbff, 0x5, 0x10000, 0x40, 0x3f]}, @lsrr={0x83, 0x17, 0xcb, [@local, @multicast1, @broadcast, @loopback, @broadcast]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x43, [@loopback, @broadcast]}, @ssrr={0x89, 0x13, 0xe2, [@empty, @remote, @multicast2, @rand_addr=0x7]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x68, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004080}, 0x4040890) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000240)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ec6000/0x2000)=nil, &(0x7f0000da0000/0xf000)=nil, &(0x7f0000f18000/0x4000)=nil, &(0x7f0000d2f000/0x14000)=nil, &(0x7f0000cef000/0x9000)=nil, &(0x7f0000c4a000/0x3000)=nil], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2) 11:39:13 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000001c0)=""/4086, 0xff6}, &(0x7f00000000c0)=0x40) 11:39:13 executing program 5: mbind(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 762.548644] FAULT_INJECTION: forcing a failure. [ 762.548644] name failslab, interval 1, probability 0, space 0, times 0 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/225, 0xe1, 0x0, &(0x7f0000000100)=""/54, 0x36}, &(0x7f0000000180)=0x40) 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) shmget(0x1, 0x3000, 0x8, &(0x7f0000f5a000/0x3000)=nil) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 762.634956] CPU: 1 PID: 28083 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 762.642928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 762.652303] Call Trace: [ 762.654905] dump_stack+0x1b2/0x281 [ 762.658547] should_fail.cold+0x10a/0x149 [ 762.662714] should_failslab+0xd6/0x130 [ 762.666712] kmem_cache_alloc+0x28e/0x3c0 [ 762.670885] __anon_vma_prepare+0x2ae/0x510 [ 762.675231] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 762.680352] ? __lockdep_init_map+0x100/0x560 [ 762.684864] ? prep_transhuge_page+0xa0/0xa0 [ 762.689288] ? _raw_spin_unlock+0x29/0x40 [ 762.693457] ? __pmd_alloc+0x27f/0x3f0 [ 762.697367] __handle_mm_fault+0x2ac4/0x4620 [ 762.701813] ? vm_insert_page+0x7c0/0x7c0 [ 762.705993] ? mark_held_locks+0xa6/0xf0 [ 762.710075] handle_mm_fault+0x455/0x9c0 [ 762.714150] __get_user_pages+0x4e9/0x1270 [ 762.718405] ? follow_page_mask+0x18a0/0x18a0 [ 762.722918] ? lock_downgrade+0x740/0x740 [ 762.727073] ? vfs_write+0x35d/0x4d0 [ 762.730813] ? lock_acquire+0x170/0x3f0 [ 762.734804] get_user_pages+0x93/0xc0 [ 762.738630] SyS_get_mempolicy+0x51c/0xc20 [ 762.742883] ? SyS_write+0x14d/0x210 [ 762.746618] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.751051] ? __do_page_fault+0x159/0xad0 [ 762.755321] ? do_syscall_64+0x4c/0x640 [ 762.759328] ? SyS_migrate_pages+0x6e0/0x6e0 [ 762.763760] do_syscall_64+0x1d5/0x640 [ 762.767689] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 762.772981] RIP: 0033:0x7f690ef910f9 [ 762.776699] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 762.784420] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 762.791694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 762.799150] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 762.806435] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 762.813719] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:13 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 5) 11:39:13 executing program 5: mbind(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:13 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000001c0)=""/4086, 0xff6}, &(0x7f00000000c0)=0x40) 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/225, 0xe1, 0x0, &(0x7f0000000100)=""/54, 0x36}, &(0x7f0000000180)=0x40) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/225, 0xe1, 0x0, &(0x7f0000000100)=""/54, 0x36}, &(0x7f0000000180)=0x40) (async) 11:39:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80082600}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfffffffb, 0x2, {{0x37, 0x4, 0x3, 0x3, 0xdc, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x0, [{@empty, 0xc95}, {@multicast2, 0x7}, {@broadcast, 0x101}]}, @noop, @generic={0x94, 0x8, "cbecaf24c8eb"}, @cipso={0x86, 0x24, 0x2, [{0x5, 0xe, "87d2cfbdb27b0090f52f52ef"}, {0x6, 0x10, "50d7b36b3ca3f36faa56a1675046"}]}, @timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x2, [{@broadcast, 0xb9}, {@local, 0x4b}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x28, 0x3c, 0x0, 0x6, [0x67800000, 0x0, 0xffffffff, 0x9a52, 0xfffffbff, 0x5, 0x10000, 0x40, 0x3f]}, @lsrr={0x83, 0x17, 0xcb, [@local, @multicast1, @broadcast, @loopback, @broadcast]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x43, [@loopback, @broadcast]}, @ssrr={0x89, 0x13, 0xe2, [@empty, @remote, @multicast2, @rand_addr=0x7]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x68, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004080}, 0x4040890) (async) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000240)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ec6000/0x2000)=nil, &(0x7f0000da0000/0xf000)=nil, &(0x7f0000f18000/0x4000)=nil, &(0x7f0000d2f000/0x14000)=nil, &(0x7f0000cef000/0x9000)=nil, &(0x7f0000c4a000/0x3000)=nil], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2) 11:39:13 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) shmget(0x1, 0x3000, 0x8, &(0x7f0000f5a000/0x3000)=nil) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) shmget(0x1, 0x3000, 0x8, &(0x7f0000f5a000/0x3000)=nil) (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:13 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000001c0)=""/4086, 0xff6}, &(0x7f00000000c0)=0x40) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000001c0)=""/4086, 0xff6}, &(0x7f00000000c0)=0x40) (async) 11:39:13 executing program 5: mbind(&(0x7f0000fac000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:13 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/225, 0xe1, 0x0, &(0x7f0000000100)=""/54, 0x36}, &(0x7f0000000180)=0x40) 11:39:14 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 11:39:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80082600}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfffffffb, 0x2, {{0x37, 0x4, 0x3, 0x3, 0xdc, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x0, [{@empty, 0xc95}, {@multicast2, 0x7}, {@broadcast, 0x101}]}, @noop, @generic={0x94, 0x8, "cbecaf24c8eb"}, @cipso={0x86, 0x24, 0x2, [{0x5, 0xe, "87d2cfbdb27b0090f52f52ef"}, {0x6, 0x10, "50d7b36b3ca3f36faa56a1675046"}]}, @timestamp_prespec={0x44, 0x1c, 0xc8, 0x3, 0x2, [{@broadcast, 0xb9}, {@local, 0x4b}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x28, 0x3c, 0x0, 0x6, [0x67800000, 0x0, 0xffffffff, 0x9a52, 0xfffffbff, 0x5, 0x10000, 0x40, 0x3f]}, @lsrr={0x83, 0x17, 0xcb, [@local, @multicast1, @broadcast, @loopback, @broadcast]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x43, [@loopback, @broadcast]}, @ssrr={0x89, 0x13, 0xe2, [@empty, @remote, @multicast2, @rand_addr=0x7]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x68, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004080}, 0x4040890) (async) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000240)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ec6000/0x2000)=nil, &(0x7f0000da0000/0xf000)=nil, &(0x7f0000f18000/0x4000)=nil, &(0x7f0000d2f000/0x14000)=nil, &(0x7f0000cef000/0x9000)=nil, &(0x7f0000c4a000/0x3000)=nil], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x2) 11:39:14 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) [ 763.139220] FAULT_INJECTION: forcing a failure. [ 763.139220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.188485] CPU: 1 PID: 28155 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 763.196428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 763.205797] Call Trace: [ 763.208402] dump_stack+0x1b2/0x281 [ 763.212049] should_fail.cold+0x10a/0x149 [ 763.216223] __alloc_pages_nodemask+0x21e/0x2900 [ 763.221001] ? trace_hardirqs_on+0x10/0x10 [ 763.225268] ? trace_hardirqs_on+0x10/0x10 [ 763.229521] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 763.234373] ? trace_hardirqs_on+0x10/0x10 [ 763.238625] ? __anon_vma_prepare+0x281/0x510 [ 763.243133] ? lock_acquire+0x170/0x3f0 [ 763.247116] ? lock_downgrade+0x740/0x740 [ 763.251273] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 763.256734] alloc_pages_vma+0x4b3/0x6d0 [ 763.260811] do_huge_pmd_anonymous_page+0x2d6/0x1700 [ 763.265933] ? prep_transhuge_page+0xa0/0xa0 [ 763.270446] ? _raw_spin_unlock+0x29/0x40 [ 763.274611] ? __pmd_alloc+0x27f/0x3f0 [ 763.278596] __handle_mm_fault+0x2ac4/0x4620 [ 763.283016] ? vm_insert_page+0x7c0/0x7c0 [ 763.287179] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 763.292213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 763.296983] ? mark_held_locks+0xa6/0xf0 [ 763.301057] handle_mm_fault+0x455/0x9c0 [ 763.305130] __get_user_pages+0x4e9/0x1270 [ 763.309385] ? follow_page_mask+0x18a0/0x18a0 [ 763.313888] ? lock_downgrade+0x740/0x740 [ 763.318047] ? vfs_write+0x35d/0x4d0 [ 763.321778] ? lock_acquire+0x170/0x3f0 [ 763.325764] get_user_pages+0x93/0xc0 [ 763.329575] SyS_get_mempolicy+0x51c/0xc20 [ 763.333818] ? SyS_write+0x14d/0x210 [ 763.337536] ? SyS_migrate_pages+0x6e0/0x6e0 [ 763.341935] ? __do_page_fault+0x159/0xad0 [ 763.346158] ? do_syscall_64+0x4c/0x640 [ 763.350128] ? SyS_migrate_pages+0x6e0/0x6e0 [ 763.354539] do_syscall_64+0x1d5/0x640 [ 763.358446] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 763.363637] RIP: 0033:0x7f690ef910f9 [ 763.367370] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 763.375124] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 11:39:14 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 6) 11:39:14 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, r0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:14 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) shmget(0x1, 0x3000, 0x8, &(0x7f0000f5a000/0x3000)=nil) (async) shmget(0x1, 0x3000, 0x8, &(0x7f0000f5a000/0x3000)=nil) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x12) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:14 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/168) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$dsp(&(0x7f0000cdd000/0x3000)=nil, 0x3000, 0x0, 0x141813, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$KVM_VCPU(&(0x7f0000c71000/0x3000)=nil, 0x930, 0x1000002, 0x1010, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1001}, 0x10) 11:39:14 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000e50000/0x2000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) 11:39:14 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) (async) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) [ 763.382414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.389695] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 763.396969] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 763.404249] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:14 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000e50000/0x2000)=nil}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) 11:39:14 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, r0) (async) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:14 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) mbind(&(0x7f0000fbf000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4, 0x3, 0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x5fa50766, &(0x7f0000fff000/0x1000)=nil, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c7c000/0x1000)=nil, &(0x7f0000e92000/0x1000)=nil, &(0x7f0000c44000/0x3000)=nil, &(0x7f0000e43000/0x3000)=nil, &(0x7f0000dfc000/0x1000)=nil, &(0x7f0000c8f000/0x1000)=nil, &(0x7f0000ed5000/0x4000)=nil, &(0x7f0000d48000/0x4000)=nil, &(0x7f0000ea7000/0x2000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000040)="01bbad6c0f235d19910bfb6f3d20ea612f3f2f49a57c82ab2a200680251d8197592ed22a22b3c6c3b3453476c8f857409189c77e2872f902c616de9c2f", 0x3d}, 0x68) getpid() r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000c2c000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000df6000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x1ff, 0x2, 0x401, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) [ 763.508072] FAULT_INJECTION: forcing a failure. [ 763.508072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:39:14 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/168) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$dsp(&(0x7f0000cdd000/0x3000)=nil, 0x3000, 0x0, 0x141813, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$KVM_VCPU(&(0x7f0000c71000/0x3000)=nil, 0x930, 0x1000002, 0x1010, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1001}, 0x10) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/168) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) mmap$dsp(&(0x7f0000cdd000/0x3000)=nil, 0x3000, 0x0, 0x141813, r0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) mmap$KVM_VCPU(&(0x7f0000c71000/0x3000)=nil, 0x930, 0x1000002, 0x1010, r1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1001}, 0x10) (async) 11:39:14 executing program 2: mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000180)=0x970, 0xa, 0x4) [ 763.590702] CPU: 1 PID: 28191 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 763.598649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 763.608016] Call Trace: [ 763.610619] dump_stack+0x1b2/0x281 [ 763.614268] should_fail.cold+0x10a/0x149 [ 763.618433] __alloc_pages_nodemask+0x21e/0x2900 [ 763.623211] ? trace_hardirqs_on+0x10/0x10 [ 763.627467] ? trace_hardirqs_on+0x10/0x10 [ 763.631729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 763.636581] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 763.641471] ? refill_stock+0x260/0x260 [ 763.645465] ? lock_downgrade+0x740/0x740 [ 763.649672] ? get_mem_cgroup_from_mm+0x112/0x360 [ 763.654531] alloc_pages_current+0x155/0x260 [ 763.658957] ? mem_cgroup_try_charge+0x2db/0x840 [ 763.663731] pte_alloc_one+0x15/0x100 [ 763.667589] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 763.672709] ? prep_transhuge_page+0xa0/0xa0 [ 763.677131] ? _raw_spin_unlock+0x29/0x40 [ 763.681311] ? __pmd_alloc+0x27f/0x3f0 [ 763.685219] __handle_mm_fault+0x2ac4/0x4620 [ 763.689644] ? vm_insert_page+0x7c0/0x7c0 [ 763.693816] ? mark_held_locks+0xa6/0xf0 [ 763.697895] handle_mm_fault+0x455/0x9c0 [ 763.701972] __get_user_pages+0x4e9/0x1270 [ 763.706238] ? follow_page_mask+0x18a0/0x18a0 [ 763.710750] ? lock_downgrade+0x740/0x740 [ 763.714906] ? vfs_write+0x35d/0x4d0 [ 763.718722] ? lock_acquire+0x170/0x3f0 [ 763.722714] get_user_pages+0x93/0xc0 [ 763.726537] SyS_get_mempolicy+0x51c/0xc20 [ 763.730782] ? SyS_write+0x14d/0x210 [ 763.734506] ? SyS_migrate_pages+0x6e0/0x6e0 [ 763.738925] ? __do_page_fault+0x159/0xad0 [ 763.743168] ? do_syscall_64+0x4c/0x640 [ 763.747155] ? SyS_migrate_pages+0x6e0/0x6e0 [ 763.751582] do_syscall_64+0x1d5/0x640 [ 763.755491] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 763.760685] RIP: 0033:0x7f690ef910f9 [ 763.764416] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 763.772130] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 763.779409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 11:39:14 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/168) (async, rerun: 64) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$dsp(&(0x7f0000cdd000/0x3000)=nil, 0x3000, 0x0, 0x141813, r0, 0x0) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$KVM_VCPU(&(0x7f0000c71000/0x3000)=nil, 0x930, 0x1000002, 0x1010, r1, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1001}, 0x10) [ 763.786693] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 763.793970] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 763.801246] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:14 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 7) 11:39:14 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, r0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:14 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) mbind(&(0x7f0000fbf000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4, 0x3, 0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x5fa50766, &(0x7f0000fff000/0x1000)=nil, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c7c000/0x1000)=nil, &(0x7f0000e92000/0x1000)=nil, &(0x7f0000c44000/0x3000)=nil, &(0x7f0000e43000/0x3000)=nil, &(0x7f0000dfc000/0x1000)=nil, &(0x7f0000c8f000/0x1000)=nil, &(0x7f0000ed5000/0x4000)=nil, &(0x7f0000d48000/0x4000)=nil, &(0x7f0000ea7000/0x2000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000040)="01bbad6c0f235d19910bfb6f3d20ea612f3f2f49a57c82ab2a200680251d8197592ed22a22b3c6c3b3453476c8f857409189c77e2872f902c616de9c2f", 0x3d}, 0x68) getpid() r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000c2c000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000df6000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x1ff, 0x2, 0x401, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) pkey_mprotect(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) (async) mbind(&(0x7f0000fbf000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4, 0x3, 0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x5fa50766, &(0x7f0000fff000/0x1000)=nil, 0x5) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c7c000/0x1000)=nil, &(0x7f0000e92000/0x1000)=nil, &(0x7f0000c44000/0x3000)=nil, &(0x7f0000e43000/0x3000)=nil, &(0x7f0000dfc000/0x1000)=nil, &(0x7f0000c8f000/0x1000)=nil, &(0x7f0000ed5000/0x4000)=nil, &(0x7f0000d48000/0x4000)=nil, &(0x7f0000ea7000/0x2000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000040)="01bbad6c0f235d19910bfb6f3d20ea612f3f2f49a57c82ab2a200680251d8197592ed22a22b3c6c3b3453476c8f857409189c77e2872f902c616de9c2f", 0x3d}, 0x68) (async) getpid() (async) getpid() (async) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000c2c000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000df6000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x1ff, 0x2, 0x401, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) 11:39:14 executing program 2: mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000180)=0x970, 0xa, 0x4) 11:39:14 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000e50000/0x2000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000e50000/0x2000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) 11:39:14 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000180)=0x970, 0xa, 0x4) 11:39:15 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x4008) prctl$PR_SET_SECUREBITS(0x1c, 0x8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x5) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = socket(0x1d, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb000218}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x348}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40805) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x133}]]}, 0x44}, 0x1, 0x0, 0x0, 0x44004800}, 0x20000000) get_mempolicy(&(0x7f0000000280), &(0x7f0000000040), 0xda8, &(0x7f0000ffc000/0x2000)=nil, 0x2) 11:39:15 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 764.045871] FAULT_INJECTION: forcing a failure. [ 764.045871] name failslab, interval 1, probability 0, space 0, times 0 [ 764.097265] CPU: 1 PID: 28254 Comm: syz-executor.4 Not tainted 4.14.307-syzkaller #0 [ 764.105223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 764.114604] Call Trace: [ 764.117216] dump_stack+0x1b2/0x281 [ 764.120876] should_fail.cold+0x10a/0x149 [ 764.125048] should_failslab+0xd6/0x130 [ 764.129042] kmem_cache_alloc+0x28e/0x3c0 [ 764.133208] ptlock_alloc+0x1d/0x70 [ 764.136855] pte_alloc_one+0x57/0x100 [ 764.140684] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 764.145808] ? prep_transhuge_page+0xa0/0xa0 [ 764.150231] ? _raw_spin_unlock+0x29/0x40 [ 764.154444] ? __pmd_alloc+0x27f/0x3f0 [ 764.158366] __handle_mm_fault+0x2ac4/0x4620 [ 764.162811] ? vm_insert_page+0x7c0/0x7c0 [ 764.166986] ? mark_held_locks+0xa6/0xf0 [ 764.171062] handle_mm_fault+0x455/0x9c0 [ 764.175141] __get_user_pages+0x4e9/0x1270 [ 764.179395] ? follow_page_mask+0x18a0/0x18a0 [ 764.183905] ? lock_downgrade+0x740/0x740 [ 764.188019] can: request_module (can-proto-4) failed. [ 764.188064] ? vfs_write+0x35d/0x4d0 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) pkey_mprotect(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) mbind(&(0x7f0000fbf000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4, 0x3, 0x1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x5fa50766, &(0x7f0000fff000/0x1000)=nil, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c7c000/0x1000)=nil, &(0x7f0000e92000/0x1000)=nil, &(0x7f0000c44000/0x3000)=nil, &(0x7f0000e43000/0x3000)=nil, &(0x7f0000dfc000/0x1000)=nil, &(0x7f0000c8f000/0x1000)=nil, &(0x7f0000ed5000/0x4000)=nil, &(0x7f0000d48000/0x4000)=nil, &(0x7f0000ea7000/0x2000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000040)="01bbad6c0f235d19910bfb6f3d20ea612f3f2f49a57c82ab2a200680251d8197592ed22a22b3c6c3b3453476c8f857409189c77e2872f902c616de9c2f", 0x3d}, 0x68) getpid() r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000c2c000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000df6000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x1ff, 0x2, 0x401, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) pkey_mprotect(&(0x7f0000e5e000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) (async) mbind(&(0x7f0000fbf000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000100)=0x4, 0x3, 0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x5fa50766, &(0x7f0000fff000/0x1000)=nil, 0x5) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c7c000/0x1000)=nil, &(0x7f0000e92000/0x1000)=nil, &(0x7f0000c44000/0x3000)=nil, &(0x7f0000e43000/0x3000)=nil, &(0x7f0000dfc000/0x1000)=nil, &(0x7f0000c8f000/0x1000)=nil, &(0x7f0000ed5000/0x4000)=nil, &(0x7f0000d48000/0x4000)=nil, &(0x7f0000ea7000/0x2000)=nil, &(0x7f0000f81000/0x4000)=nil, &(0x7f0000000040)="01bbad6c0f235d19910bfb6f3d20ea612f3f2f49a57c82ab2a200680251d8197592ed22a22b3c6c3b3453476c8f857409189c77e2872f902c616de9c2f", 0x3d}, 0x68) (async) getpid() (async) getpid() (async) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000c2c000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000df6000/0x4000)=nil], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x1ff, 0x2, 0x401, 0x3], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000d11000/0x2000)=nil, &(0x7f0000dde000/0x2000)=nil, &(0x7f0000c31000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e92000/0x2000)=nil, &(0x7f0000fc6000/0x1000)=nil, &(0x7f00000000c0)="3b606c21c0956af85a421af0864bf023c99ebfc2afb9f655411706cd28c6cb9f66bddd6fedd505bd21648456e89d936c3fdcf4c2cd41ab8acaf6755f4a98a935b475def5b3f85e2a2398d3e5ac440ee98ef98a167161819a6a4d6afdb813e94855aa1d19984ab2d84dadcd51dfb4f9916e03be61e122a36db3cb8e99435f61edaa3306448a050bc01a8c9df57718d8cb89a7fe889ee4c40dbc0f782cc6eb7fa8", 0xa0}, 0x68) 11:39:15 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002d63cb6c766530cb3040b49ddedc59883cbaeba098a0e6fc3704f7afd755721c6dbc5e635406908bd310186b54ee3b2fcd7fea5a5be7d50e4882820a5432b58c468088ea89a140ca7ee985080752bd8bf4b204e6adfab40a890b79040426373eb4f3104d77dc9b99e82b17a817298ea3a3e91b5b23a06e19a2cf0b253e4062592a99f1fb1ca7be2d085f682ba50b6b038242f132c064ced6b0ce8c55f0b0f9a2cd33cc", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf257c0000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000085}, 0x40) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x5, 0x40}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 764.188083] ? lock_acquire+0x170/0x3f0 [ 764.188100] get_user_pages+0x93/0xc0 [ 764.188118] SyS_get_mempolicy+0x51c/0xc20 [ 764.188134] ? SyS_write+0x14d/0x210 [ 764.212751] ? SyS_migrate_pages+0x6e0/0x6e0 [ 764.217176] ? __do_page_fault+0x159/0xad0 [ 764.221426] ? do_syscall_64+0x4c/0x640 [ 764.225456] ? SyS_migrate_pages+0x6e0/0x6e0 [ 764.229876] do_syscall_64+0x1d5/0x640 [ 764.233804] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 764.238999] RIP: 0033:0x7f690ef910f9 [ 764.242719] RSP: 002b:00007f690d503168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 764.250437] RAX: ffffffffffffffda RBX: 00007f690f0b0f80 RCX: 00007f690ef910f9 [ 764.257728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 764.265008] RBP: 00007f690d5031d0 R08: 0000000000000003 R09: 0000000000000000 [ 764.272386] R10: 0000000020fff000 R11: 0000000000000246 R12: 0000000000000001 [ 764.279667] R13: 00007ffc9a00b3ef R14: 00007f690d503300 R15: 0000000000022000 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (fail_nth: 8) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x4008) (async, rerun: 64) prctl$PR_SET_SECUREBITS(0x1c, 0x8) (rerun: 64) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x5) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = socket(0x1d, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb000218}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x348}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40805) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x133}]]}, 0x44}, 0x1, 0x0, 0x0, 0x44004800}, 0x20000000) get_mempolicy(&(0x7f0000000280), &(0x7f0000000040), 0xda8, &(0x7f0000ffc000/0x2000)=nil, 0x2) 11:39:15 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000d11000/0x2000)=nil, &(0x7f0000dde000/0x2000)=nil, &(0x7f0000c31000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e92000/0x2000)=nil, &(0x7f0000fc6000/0x1000)=nil, &(0x7f00000000c0)="3b606c21c0956af85a421af0864bf023c99ebfc2afb9f655411706cd28c6cb9f66bddd6fedd505bd21648456e89d936c3fdcf4c2cd41ab8acaf6755f4a98a935b475def5b3f85e2a2398d3e5ac440ee98ef98a167161819a6a4d6afdb813e94855aa1d19984ab2d84dadcd51dfb4f9916e03be61e122a36db3cb8e99435f61edaa3306448a050bc01a8c9df57718d8cb89a7fe889ee4c40dbc0f782cc6eb7fa8", 0xa0}, 0x68) 11:39:15 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002d63cb6c766530cb3040b49ddedc59883cbaeba098a0e6fc3704f7afd755721c6dbc5e635406908bd310186b54ee3b2fcd7fea5a5be7d50e4882820a5432b58c468088ea89a140ca7ee985080752bd8bf4b204e6adfab40a890b79040426373eb4f3104d77dc9b99e82b17a817298ea3a3e91b5b23a06e19a2cf0b253e4062592a99f1fb1ca7be2d085f682ba50b6b038242f132c064ced6b0ce8c55f0b0f9a2cd33cc", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf257c0000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000085}, 0x40) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x5, 0x40}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xa0a, 0x44000) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) socketpair(0x2b, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0xfed7, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x20004043}, 0xc080) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001bf330e1d8feb90589fdc870c523550baf2c67c9be16ec6167b571524b81e62d49ec54ac6ea543760d314c08bd5facfcdac81b95f035e6800068634f649246feaace1946a34e95a78f9d34", @ANYRES16=r1, @ANYBLOB="000426bd7020fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42080) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) shmget(0x3, 0x2000, 0x54000181, &(0x7f0000e39000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c61000/0x2000)=nil}) mincore(&(0x7f0000eb0000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/185) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000d11000/0x2000)=nil, &(0x7f0000dde000/0x2000)=nil, &(0x7f0000c31000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e92000/0x2000)=nil, &(0x7f0000fc6000/0x1000)=nil, &(0x7f00000000c0)="3b606c21c0956af85a421af0864bf023c99ebfc2afb9f655411706cd28c6cb9f66bddd6fedd505bd21648456e89d936c3fdcf4c2cd41ab8acaf6755f4a98a935b475def5b3f85e2a2398d3e5ac440ee98ef98a167161819a6a4d6afdb813e94855aa1d19984ab2d84dadcd51dfb4f9916e03be61e122a36db3cb8e99435f61edaa3306448a050bc01a8c9df57718d8cb89a7fe889ee4c40dbc0f782cc6eb7fa8", 0xa0}, 0x68) (rerun: 32) 11:39:15 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002d63cb6c766530cb3040b49ddedc59883cbaeba098a0e6fc3704f7afd755721c6dbc5e635406908bd310186b54ee3b2fcd7fea5a5be7d50e4882820a5432b58c468088ea89a140ca7ee985080752bd8bf4b204e6adfab40a890b79040426373eb4f3104d77dc9b99e82b17a817298ea3a3e91b5b23a06e19a2cf0b253e4062592a99f1fb1ca7be2d085f682ba50b6b038242f132c064ced6b0ce8c55f0b0f9a2cd33cc", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf257c0000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000085}, 0x40) (async, rerun: 64) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x4, 0x5, 0x40}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xa0a, 0x44000) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) socketpair(0x2b, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0xfed7, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x20004043}, 0xc080) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001bf330e1d8feb90589fdc870c523550baf2c67c9be16ec6167b571524b81e62d49ec54ac6ea543760d314c08bd5facfcdac81b95f035e6800068634f649246feaace1946a34e95a78f9d34", @ANYRES16=r1, @ANYBLOB="000426bd7020fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42080) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) shmget(0x3, 0x2000, 0x54000181, &(0x7f0000e39000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c61000/0x2000)=nil}) mincore(&(0x7f0000eb0000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/185) syz_open_dev$mouse(&(0x7f0000000040), 0xa0a, 0x44000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) socketpair(0x2b, 0x4, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0xfed7, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x20004043}, 0xc080) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001bf330e1d8feb90589fdc870c523550baf2c67c9be16ec6167b571524b81e62d49ec54ac6ea543760d314c08bd5facfcdac81b95f035e6800068634f649246feaace1946a34e95a78f9d34", @ANYRES16=r1, @ANYBLOB="000426bd7020fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42080) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) shmget(0x3, 0x2000, 0x54000181, &(0x7f0000e39000/0x2000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c61000/0x2000)=nil}) (async) mincore(&(0x7f0000eb0000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/185) (async) 11:39:15 executing program 2: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$instantiate(0xc, r2, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/,&'}, 0x2d, r0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x0, r0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r3 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r3) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffa000/0x1000)=nil) 11:39:15 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x65}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x4008) (async, rerun: 32) prctl$PR_SET_SECUREBITS(0x1c, 0x8) (async, rerun: 32) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5, &(0x7f0000ffd000/0x3000)=nil, 0x5) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = socket(0x1d, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xb000218}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x348}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40805) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x133}]]}, 0x44}, 0x1, 0x0, 0x0, 0x44004800}, 0x20000000) get_mempolicy(&(0x7f0000000280), &(0x7f0000000040), 0xda8, &(0x7f0000ffc000/0x2000)=nil, 0x2) 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/184) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1, 0x7) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x440) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000e82000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x4, 0x3, 0x100000, 0x1000, &(0x7f0000c68000/0x1000)=nil}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ee8000/0x1000)=nil, 0x1000}}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) [ 764.567341] can: request_module (can-proto-4) failed. 11:39:15 executing program 2: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$instantiate(0xc, r2, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/,&'}, 0x2d, r0) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x0, r0) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r3 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r3) (async) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffa000/0x1000)=nil) 11:39:15 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xa0a, 0x44000) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) socketpair(0x2b, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0xfed7, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params]}, 0x44}, 0x1, 0x0, 0x0, 0x20004043}, 0xc080) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001bf330e1d8feb90589fdc870c523550baf2c67c9be16ec6167b571524b81e62d49ec54ac6ea543760d314c08bd5facfcdac81b95f035e6800068634f649246feaace1946a34e95a78f9d34", @ANYRES16=r1, @ANYBLOB="000426bd7020fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42080) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000001bf330e1d8feb90589fdc870c523550baf2c67c9be16ec6167b571524b81e62d49ec54ac6ea543760d314c08bd5facfcdac81b95f035e6800068634f649246feaace1946a34e95a78f9d34", @ANYRES16=r1, @ANYBLOB="000426bd7020fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x42080) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) shmget(0x3, 0x2000, 0x54000181, &(0x7f0000e39000/0x2000)=nil) (async) shmget(0x3, 0x2000, 0x54000181, &(0x7f0000e39000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c61000/0x2000)=nil}) mincore(&(0x7f0000eb0000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/185) (async) mincore(&(0x7f0000eb0000/0x3000)=nil, 0x3000, &(0x7f0000000180)=""/185) 11:39:15 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x4, 0x3, 0x100000, 0x1000, &(0x7f0000c68000/0x1000)=nil}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ee8000/0x1000)=nil, 0x1000}}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x1) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/184) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1, 0x7) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x440) (rerun: 64) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000e82000/0x2000)=nil}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 2: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$instantiate(0xc, r2, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/,&'}, 0x2d, r0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x0, r0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async, rerun: 64) r3 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r3) (async, rerun: 32) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x0) (async, rerun: 32) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffa000/0x1000)=nil) 11:39:15 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/34) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x800440) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffffff, 0xbab4, 0x200, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x2, 0x1, 0x2}, 0x48) [ 764.731661] can: request_module (can-proto-4) failed. 11:39:15 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x125080) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x4f6d, 0x1, 0x17}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x3, 0x7, 0xff}) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000f37000/0x3000)=nil) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000d3c000/0x3000)=nil, 0x3000}}) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x1) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/184) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000001c0)=0xfffffffffffffffe, 0x1, 0x7) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x440) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000e82000/0x2000)=nil}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x4, 0x3, 0x100000, 0x1000, &(0x7f0000c68000/0x1000)=nil}) (async, rerun: 64) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ee8000/0x1000)=nil, 0x1000}}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 64) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/34) (async, rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x800440) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffffff, 0xbab4, 0x200, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x2, 0x1, 0x2}, 0x48) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x100, 0xe0, 0x1) 11:39:15 executing program 3: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x125080) (async) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x125080) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x4f6d, 0x1, 0x17}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x3, 0x7, 0xff}) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:15 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000f37000/0x3000)=nil) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000d3c000/0x3000)=nil, 0x3000}}) 11:39:15 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:15 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x100, 0xe0, 0x1) 11:39:15 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x125080) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x4f6d, 0x1, 0x17}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x3, 0x7, 0xff}) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x125080) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x4f6d, 0x1, 0x17}, 0x1, 0x6, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x3, 0x7, 0xff}) (async) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:39:16 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/34) (async) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x800440) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xffffffff, 0xbab4, 0x200, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x2, 0x1, 0x2}, 0x48) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x100, 0xe0, 0x1) 11:39:16 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000f37000/0x3000)=nil) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000d3c000/0x3000)=nil, 0x3000}}) 11:39:16 executing program 3: mlock(&(0x7f0000ff3000/0x3000)=nil, 0x3000) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, 0x0, 0x2, 0x0, r0) mlock(&(0x7f0000ff0000/0xf000)=nil, 0xf000) 11:39:16 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:16 executing program 5: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000001200)=""/179, 0xb3) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000d0a000/0x4000)=nil}) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/194) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000012c0)={&(0x7f0000ee2000/0x4000)=nil, &(0x7f0000dc1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e04000/0x3000)=nil, &(0x7f0000e6b000/0x4000)=nil, &(0x7f0000cde000/0x8000)=nil, &(0x7f0000c5b000/0x1000)=nil, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000d51000/0x2000)=nil, &(0x7f0000ce6000/0x3000)=nil, &(0x7f0000cb3000/0x4000)=nil, &(0x7f0000001940)="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", 0x1000, r1}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) write$vhost_msg(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000140)=""/40, 0x28, &(0x7f0000000180)=""/4096, 0x2, 0x1}}, 0x48) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 3: mlock(&(0x7f0000ff3000/0x3000)=nil, 0x3000) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, 0x0, 0x2, 0x0, r0) (async) mlock(&(0x7f0000ff0000/0xf000)=nil, 0xf000) 11:39:16 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x11419f6cdcb0fc96, 0x810, r0, 0x0) 11:39:16 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:16 executing program 5: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000001200)=""/179, 0xb3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000d0a000/0x4000)=nil}) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/194) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000012c0)={&(0x7f0000ee2000/0x4000)=nil, &(0x7f0000dc1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e04000/0x3000)=nil, &(0x7f0000e6b000/0x4000)=nil, &(0x7f0000cde000/0x8000)=nil, &(0x7f0000c5b000/0x1000)=nil, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000d51000/0x2000)=nil, &(0x7f0000ce6000/0x3000)=nil, &(0x7f0000cb3000/0x4000)=nil, &(0x7f0000001940)="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", 0x1000, r1}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) write$vhost_msg(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000140)=""/40, 0x28, &(0x7f0000000180)=""/4096, 0x2, 0x1}}, 0x48) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x7, 0x5) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x11419f6cdcb0fc96, 0x810, r0, 0x0) (rerun: 64) 11:39:16 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 3: mlock(&(0x7f0000ff3000/0x3000)=nil, 0x3000) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, 0x0, 0x2, 0x0, r0) mlock(&(0x7f0000ff0000/0xf000)=nil, 0xf000) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x7, 0x5) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 5: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000001200)=""/179, 0xb3) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x4, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000d0a000/0x4000)=nil}) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/194) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000012c0)={&(0x7f0000ee2000/0x4000)=nil, &(0x7f0000dc1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e04000/0x3000)=nil, &(0x7f0000e6b000/0x4000)=nil, &(0x7f0000cde000/0x8000)=nil, &(0x7f0000c5b000/0x1000)=nil, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000d51000/0x2000)=nil, &(0x7f0000ce6000/0x3000)=nil, &(0x7f0000cb3000/0x4000)=nil, &(0x7f0000001940)="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", 0x1000, r1}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) write$vhost_msg(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000140)=""/40, 0x28, &(0x7f0000000180)=""/4096, 0x2, 0x1}}, 0x48) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000001200)=""/179, 0xb3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x4, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000d0a000/0x4000)=nil}) (async) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/194) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000012c0)={&(0x7f0000ee2000/0x4000)=nil, &(0x7f0000dc1000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000e04000/0x3000)=nil, &(0x7f0000e6b000/0x4000)=nil, &(0x7f0000cde000/0x8000)=nil, &(0x7f0000c5b000/0x1000)=nil, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000d51000/0x2000)=nil, &(0x7f0000ce6000/0x3000)=nil, &(0x7f0000cb3000/0x4000)=nil, &(0x7f0000001940)="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", 0x1000, r1}, 0x68) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) write$vhost_msg(r2, &(0x7f0000001180)={0x1, {&(0x7f0000000140)=""/40, 0x28, &(0x7f0000000180)=""/4096, 0x2, 0x1}}, 0x48) (async) 11:39:16 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x11419f6cdcb0fc96, 0x810, r0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x11419f6cdcb0fc96, 0x810, r0, 0x0) 11:39:16 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x7, 0x5) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 64) 11:39:16 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x3, 0x0) r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5a000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f6d000/0x1000)=nil, 0x0) 11:39:16 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000d5e000/0x3000)=nil, 0x3000) 11:39:16 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 11:39:16 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x5) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0xeb, &(0x7f0000fff000/0x1000)=nil, 0x5) 11:39:16 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x3, 0x0) r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5a000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f6d000/0x1000)=nil, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x3, 0x0) (async) getpid() (async) move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5a000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f6d000/0x1000)=nil, 0x0) (async) 11:39:16 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000d5e000/0x3000)=nil, 0x3000) 11:39:16 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x5) 11:39:16 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) get_mempolicy(0x0, &(0x7f0000000000), 0xeb, &(0x7f0000fff000/0x1000)=nil, 0x5) (rerun: 32) 11:39:16 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x3, 0x0) r0 = getpid() move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5a000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) (async) move_pages(r0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c5a000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f6d000/0x1000)=nil, 0x0) 11:39:16 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mlock(&(0x7f0000d5e000/0x3000)=nil, 0x3000) 11:39:16 executing program 2: syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x80000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x5) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x5) 11:39:16 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0xeb, &(0x7f0000fff000/0x1000)=nil, 0x5) 11:39:16 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xdc4, 0x104200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:16 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0xc00) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:16 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f4a000/0x3000)=nil, 0x5, 0x3, 0x2}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mincore(&(0x7f0000f62000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/60) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xdc4, 0x104200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) 11:39:16 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:16 executing program 5: r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x4, 0x1, 0x8, 0x0, 0x2, 0x400a4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x1}, 0x80080, 0x6, 0x7fffffff, 0x6, 0x4, 0x1f, 0x13f, 0x0, 0x100, 0x0, 0x8}, r0, 0xb, 0xffffffffffffffff, 0x9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfe, 0x6, 0x9, 0x0, 0x5, 0x2220, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x82804, 0x7, 0x7, 0x4, 0x1, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7f4c}, r0, 0x7, r1, 0x0) mmap$perf(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0xd, 0x10, r2, 0x7) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40841) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f4a000/0x3000)=nil, 0x5, 0x3, 0x2}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mincore(&(0x7f0000f62000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/60) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) (async) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x4, 0x1, 0x8, 0x0, 0x2, 0x400a4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x1}, 0x80080, 0x6, 0x7fffffff, 0x6, 0x4, 0x1f, 0x13f, 0x0, 0x100, 0x0, 0x8}, r0, 0xb, 0xffffffffffffffff, 0x9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfe, 0x6, 0x9, 0x0, 0x5, 0x2220, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x82804, 0x7, 0x7, 0x4, 0x1, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7f4c}, r0, 0x7, r1, 0x0) mmap$perf(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0xd, 0x10, r2, 0x7) (async) mmap$perf(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0xd, 0x10, r2, 0x7) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40841) 11:39:17 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0xc00) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xdc4, 0x104200) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 11:39:17 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x4, 0x1, 0x8, 0x0, 0x2, 0x400a4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x1}, 0x80080, 0x6, 0x7fffffff, 0x6, 0x4, 0x1f, 0x13f, 0x0, 0x100, 0x0, 0x8}, r0, 0xb, 0xffffffffffffffff, 0x9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfe, 0x6, 0x9, 0x0, 0x5, 0x2220, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x82804, 0x7, 0x7, 0x4, 0x1, 0x4, 0x2, 0x0, 0x1, 0x0, 0x7f4c}, r0, 0x7, r1, 0x0) mmap$perf(&(0x7f0000feb000/0x3000)=nil, 0x3000, 0xd, 0x10, r2, 0x7) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40841) 11:39:17 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0xc00) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0xc00) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) (async) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f4a000/0x3000)=nil, 0x5, 0x3, 0x2}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mincore(&(0x7f0000f62000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/60) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f4a000/0x3000)=nil, 0x5, 0x3, 0x2}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mincore(&(0x7f0000f62000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/60) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 32) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 11:39:17 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ed9000/0x1000)=nil, 0x6) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000e9a000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0xc000) mlock(&(0x7f0000c34000/0x1000)=nil, 0x1000) 11:39:17 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (rerun: 32) get_mempolicy(0x0, &(0x7f0000000080), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x0, 0x1000, 0x8, &(0x7f0000f8e000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000d97000/0x2000)=nil, &(0x7f0000f4f000/0x1000)=nil, &(0x7f0000c81000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ef6000/0x1000)=nil, &(0x7f0000d16000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fc1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000000)="85e82dafff25f3db5bb0c41fdda5ee15b3eb074c9e843cae0a7489", 0x1b, r0}, 0x68) 11:39:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffc000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10002, 0x3, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) 11:39:17 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$dsp(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ed9000/0x1000)=nil, 0x6) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000e9a000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0xc000) mlock(&(0x7f0000c34000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ed9000/0x1000)=nil, 0x6) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000e9a000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0xc000) (async) mlock(&(0x7f0000c34000/0x1000)=nil, 0x1000) (async) 11:39:17 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000d97000/0x2000)=nil, &(0x7f0000f4f000/0x1000)=nil, &(0x7f0000c81000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ef6000/0x1000)=nil, &(0x7f0000d16000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fc1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000000)="85e82dafff25f3db5bb0c41fdda5ee15b3eb074c9e843cae0a7489", 0x1b, r0}, 0x68) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) shmget(0x0, 0x1000, 0x8, &(0x7f0000f8e000/0x1000)=nil) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 2: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:39:17 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ed9000/0x1000)=nil, 0x6) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000e9a000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0xc000) mlock(&(0x7f0000c34000/0x1000)=nil, 0x1000) 11:39:17 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$dsp(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000d97000/0x2000)=nil, &(0x7f0000f4f000/0x1000)=nil, &(0x7f0000c81000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ef6000/0x1000)=nil, &(0x7f0000d16000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fc1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000000)="85e82dafff25f3db5bb0c41fdda5ee15b3eb074c9e843cae0a7489", 0x1b, r0}, 0x68) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000d97000/0x2000)=nil, &(0x7f0000f4f000/0x1000)=nil, &(0x7f0000c81000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ef6000/0x1000)=nil, &(0x7f0000d16000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fc1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000db5000/0x2000)=nil, &(0x7f0000000000)="85e82dafff25f3db5bb0c41fdda5ee15b3eb074c9e843cae0a7489", 0x1b, r0}, 0x68) (async) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) shmget(0x0, 0x1000, 0x8, &(0x7f0000f8e000/0x1000)=nil) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) 11:39:17 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mmap$dsp(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffe76, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0xfffffce4}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2, r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x3, 0x0, 0x200, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x1000)=nil}) 11:39:17 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x4) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:39:17 executing program 1: mlock(&(0x7f0000ddc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x3, 0x0, 0x200, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x1000)=nil}) 11:39:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2, r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffe76, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0xfffffce4}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x4) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e1c000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0) mremap(&(0x7f0000f1a000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap$dsp(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r0, 0x0) mlock(&(0x7f0000f1a000/0x3000)=nil, 0x3000) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) mlock(&(0x7f0000f19000/0x3000)=nil, 0x3000) 11:39:17 executing program 1: mlock(&(0x7f0000ddc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) mlock(&(0x7f0000ddc000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) (async) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x3, 0x0, 0x200, 0x1) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x1000)=nil}) (rerun: 32) 11:39:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2, r0}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffe76, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0xfffffce4}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e1c000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0) mremap(&(0x7f0000f1a000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap$dsp(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r0, 0x0) mlock(&(0x7f0000f1a000/0x3000)=nil, 0x3000) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) mlock(&(0x7f0000f19000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000e1c000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffb000/0x2000)=nil) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0) (async) mremap(&(0x7f0000f1a000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) (async) mmap$dsp(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r0, 0x0) (async) mlock(&(0x7f0000f1a000/0x3000)=nil, 0x3000) (async) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) (async) mlock(&(0x7f0000f19000/0x3000)=nil, 0x3000) (async) 11:39:17 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x4) 11:39:17 executing program 1: mlock(&(0x7f0000ddc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) 11:39:17 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000c32000/0x2000)=nil, &(0x7f0000d0d000/0x3000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000eb2000/0x3000)=nil, &(0x7f0000d86000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e57000/0x2000)=nil, &(0x7f0000c9f000/0x2000)=nil], &(0x7f0000000040)=[0x7fc2], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0xd5, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 4: mbind(&(0x7f0000f82000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:17 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000e1c000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0) mremap(&(0x7f0000f1a000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) mmap$dsp(&(0x7f0000faa000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r0, 0x0) (async) mlock(&(0x7f0000f1a000/0x3000)=nil, 0x3000) (async) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) (async) mlock(&(0x7f0000f19000/0x3000)=nil, 0x3000) 11:39:17 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f00000011c0)=""/83, 0x53}, {&(0x7f0000001240)=""/22, 0x16}], 0x5, &(0x7f0000001300)=""/67, 0x43}, 0x2061) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:17 executing program 5: mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1000000000000, 0x7) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000d78000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0xfff, 0x9, 0x0) 11:39:17 executing program 4: mbind(&(0x7f0000f82000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x1) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000c32000/0x2000)=nil, &(0x7f0000d0d000/0x3000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000eb2000/0x3000)=nil, &(0x7f0000d86000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e57000/0x2000)=nil, &(0x7f0000c9f000/0x2000)=nil], &(0x7f0000000040)=[0x7fc2], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0xd5, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0xd5, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040027bd7000ffdbdf2508001900656d4f43cefb8ac03a33deee08000600", @ANYRES32=0x0, @ANYBLOB="08003b00260d000005002e00cf00000008003c00000000000a00090066104d9aff4a0000080031000000000005002d0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048054) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x3) 11:39:18 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f00000011c0)=""/83, 0x53}, {&(0x7f0000001240)=""/22, 0x16}], 0x5, &(0x7f0000001300)=""/67, 0x43}, 0x2061) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x348, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = getpid() move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000c32000/0x2000)=nil, &(0x7f0000d0d000/0x3000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000eb2000/0x3000)=nil, &(0x7f0000d86000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e57000/0x2000)=nil, &(0x7f0000c9f000/0x2000)=nil], &(0x7f0000000040)=[0x7fc2], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0xd5, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) getpid() (async) move_pages(r0, 0x8, &(0x7f0000000000)=[&(0x7f0000c32000/0x2000)=nil, &(0x7f0000d0d000/0x3000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000eb2000/0x3000)=nil, &(0x7f0000d86000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e57000/0x2000)=nil, &(0x7f0000c9f000/0x2000)=nil], &(0x7f0000000040)=[0x7fc2], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0xd5, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:18 executing program 5: mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1000000000000, 0x7) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000d78000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0xfff, 0x9, 0x0) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1000000000000, 0x7) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000d78000/0x4000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0xfff, 0x9, 0x0) (async) 11:39:18 executing program 4: mbind(&(0x7f0000f82000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x1) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f00000011c0)=""/83, 0x53}, {&(0x7f0000001240)=""/22, 0x16}], 0x5, &(0x7f0000001300)=""/67, 0x43}, 0x2061) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x348, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 11:39:18 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040027bd7000ffdbdf2508001900656d4f43cefb8ac03a33deee08000600", @ANYRES32=0x0, @ANYBLOB="08003b00260d000005002e00cf00000008003c00000000000a00090066104d9aff4a0000080031000000000005002d0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048054) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x3) 11:39:18 executing program 5: mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1000000000000, 0x7) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000d78000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0xfff, 0x9, 0x0) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1000000000000, 0x7) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000d78000/0x4000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mbind(&(0x7f0000d78000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0xfff, 0x9, 0x0) (async) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x5, 0x5) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000dd5000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = userfaultfd(0x80401) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000e38000/0x4000)=nil, 0x4000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0xc000000b, &(0x7f0000000180)) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x3, &(0x7f0000dde000/0x2000)=nil, 0x1) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000d2f000/0x3000)=nil) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x348, 0x4) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (rerun: 64) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munmap(&(0x7f0000c7b000/0x1000)=nil, 0x1000) mincore(&(0x7f0000f6c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/134) mmap$snddsp(&(0x7f0000e96000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x8000) 11:39:18 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x401}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x363}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x1, 0x5, 0x0, 0x11c}, 0x1d, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0xe768, 0x800, 0x81, 0xb738}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x8001, 0x0, 0x7}, 0x9, 0x10001, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x1, 0x9, 0x7f}) 11:39:18 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040027bd7000ffdbdf2508001900656d4f43cefb8ac03a33deee08000600", @ANYRES32=0x0, @ANYBLOB="08003b00260d000005002e00cf00000008003c00000000000a00090066104d9aff4a0000080031000000000005002d0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048054) (async, rerun: 32) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x3) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x5, 0x5) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000dd5000/0x2000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = userfaultfd(0x80401) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000e38000/0x4000)=nil, 0x4000}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0xc000000b, &(0x7f0000000180)) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x3, &(0x7f0000dde000/0x2000)=nil, 0x1) (async) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000d2f000/0x3000)=nil) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munmap(&(0x7f0000c7b000/0x1000)=nil, 0x1000) mincore(&(0x7f0000f6c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/134) mmap$snddsp(&(0x7f0000e96000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x8000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) munmap(&(0x7f0000c7b000/0x1000)=nil, 0x1000) (async) mincore(&(0x7f0000f6c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/134) (async) mmap$snddsp(&(0x7f0000e96000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x8000) (async) 11:39:18 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000e81000/0x4000)=nil, 0x930, 0x2000004, 0x20010, r0, 0x0) 11:39:18 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x401}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x363}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x1, 0x5, 0x0, 0x11c}, 0x1d, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0xe768, 0x800, 0x81, 0xb738}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x8001, 0x0, 0x7}, 0x9, 0x10001, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x1, 0x9, 0x7f}) 11:39:18 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000dac000/0x4000)=nil}) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x5, 0x5) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000dd5000/0x2000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = userfaultfd(0x80401) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000e38000/0x4000)=nil, 0x4000}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0xc000000b, &(0x7f0000000180)) (async) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x3, &(0x7f0000dde000/0x2000)=nil, 0x1) (async) munmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000d2f000/0x3000)=nil) 11:39:18 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000e81000/0x4000)=nil, 0x930, 0x2000004, 0x20010, r0, 0x0) 11:39:18 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x2, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x401}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x363}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x1, 0x5, 0x0, 0x11c}, 0x1d, 0x1000, 'id0\x00', 'timer0\x00', 0x0, 0xe768, 0x800, 0x81, 0xb738}) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x8001, 0x0, 0x7}, 0x9, 0x10001, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x1, 0x9, 0x7f}) 11:39:18 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munmap(&(0x7f0000c7b000/0x1000)=nil, 0x1000) mincore(&(0x7f0000f6c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/134) mmap$snddsp(&(0x7f0000e96000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x8000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) munmap(&(0x7f0000c7b000/0x1000)=nil, 0x1000) (async) mincore(&(0x7f0000f6c000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/134) (async) mmap$snddsp(&(0x7f0000e96000/0x4000)=nil, 0x4000, 0x8, 0x110, 0xffffffffffffffff, 0x8000) (async) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f7e000/0x3000)=nil, 0x3000}}) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000dac000/0x4000)=nil}) 11:39:18 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000e81000/0x4000)=nil, 0x930, 0x2000004, 0x20010, r0, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000e81000/0x4000)=nil, 0x930, 0x2000004, 0x20010, r0, 0x0) (async) 11:39:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x30, r0, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x4, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/88) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f7e000/0x3000)=nil, 0x3000}}) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000c15000/0x3000)=nil, 0x3) 11:39:18 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000dac000/0x4000)=nil}) 11:39:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x30, r0, 0x1000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x4, 0x5, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async, rerun: 64) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/88) (rerun: 64) 11:39:18 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ddd, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) 11:39:18 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f7e000/0x3000)=nil, 0x3000}}) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000c15000/0x3000)=nil, 0x3) 11:39:18 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ddd, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c4f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000c51000/0x2000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x30, r0, 0x1000) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x4, 0x5, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/88) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) (async) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) 11:39:18 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000c15000/0x3000)=nil, 0x3) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c4f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000c51000/0x2000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000c4f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000c51000/0x2000)=nil}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:18 executing program 4: mbind(&(0x7f0000ea5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4, 0x0) mincore(&(0x7f0000fe5000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/190) get_mempolicy(0x0, 0x0, 0x40, &(0x7f0000c46000/0x1000)=nil, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x1000003, 0x4011, r0, 0x1000) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) 11:39:18 executing program 2: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x2f1, 0xa, 0x8) 11:39:18 executing program 5: syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x20}, @device_b, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xa, {0x5}, "7c37c8767ac3226d"}, {0x0, 0xb, {0x2, 0xfff}, "33f9a9196388b962"}], {0x0, 0x0, {0x9}, "d4be0552feb061d5"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ddd, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ddd, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250700000008003b000101000008002b1b1d76e402046200001000000500330000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84010}, 0x40) shmget(0x0, 0x3000, 0x2, &(0x7f0000cbb000/0x3000)=nil) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mmap$dsp(&(0x7f0000ddc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ee5000/0x4000)=nil, 0x930, 0x2000002, 0x810, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 4: mbind(&(0x7f0000ea5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4, 0x0) mincore(&(0x7f0000fe5000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/190) get_mempolicy(0x0, 0x0, 0x40, &(0x7f0000c46000/0x1000)=nil, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x1000003, 0x4011, r0, 0x1000) mbind(&(0x7f0000ea5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4, 0x0) (async) mincore(&(0x7f0000fe5000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/190) (async) get_mempolicy(0x0, 0x0, 0x40, &(0x7f0000c46000/0x1000)=nil, 0x4) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x1000003, 0x4011, r0, 0x1000) (async) 11:39:18 executing program 2: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x2f1, 0xa, 0x8) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) move_pages(0xffffffffffffffff, 0xa, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x8000, 0x401, 0x1, 0x40, 0x496, 0x3, 0x5, 0x80000000, 0x8000], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x420042) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x4189, 0x5}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000c4f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000c51000/0x2000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000c4f000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000c51000/0x2000)=nil}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:18 executing program 4: mbind(&(0x7f0000ea5000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4, 0x0) mincore(&(0x7f0000fe5000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/190) get_mempolicy(0x0, 0x0, 0x40, &(0x7f0000c46000/0x1000)=nil, 0x4) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000c43000/0x4000)=nil, 0x4000, 0x1000003, 0x4011, r0, 0x1000) 11:39:18 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x5, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250700000008003b000101000008002b1b1d76e402046200001000000500330000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84010}, 0x40) shmget(0x0, 0x3000, 0x2, &(0x7f0000cbb000/0x3000)=nil) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mmap$dsp(&(0x7f0000ddc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ee5000/0x4000)=nil, 0x930, 0x2000002, 0x810, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250700000008003b000101000008002b1b1d76e402046200001000000500330000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84010}, 0x40) (async) shmget(0x0, 0x3000, 0x2, &(0x7f0000cbb000/0x3000)=nil) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) (async) mmap$dsp(&(0x7f0000ddc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ee5000/0x4000)=nil, 0x930, 0x2000002, 0x810, 0xffffffffffffffff, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:18 executing program 2: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x2f1, 0xa, 0x8) 11:39:18 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) move_pages(0xffffffffffffffff, 0xa, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x8000, 0x401, 0x1, 0x40, 0x496, 0x3, 0x5, 0x80000000, 0x8000], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x420042) (rerun: 32) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x4189, 0x5}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:18 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x5) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:18 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x5) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x521c0) mmap$snddsp(&(0x7f0000f65000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r0, 0xf000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250700000008003b000101000008002b1b1d76e402046200001000000500330000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x84010}, 0x40) (async, rerun: 32) shmget(0x0, 0x3000, 0x2, &(0x7f0000cbb000/0x3000)=nil) (rerun: 32) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mmap$dsp(&(0x7f0000ddc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ee5000/0x4000)=nil, 0x930, 0x2000002, 0x810, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffffb) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x7f, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x7, 0x3ff, 0xc9, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x65, 0x0, 0xad, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x200}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x1b, 0x7e, [@remote, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "6049fade74b99a6d9c1d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x5, 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x5, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) move_pages(0xffffffffffffffff, 0xa, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x8000, 0x401, 0x1, 0x40, 0x496, 0x3, 0x5, 0x80000000, 0x8000], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x420042) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x4189, 0x5}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) move_pages(0xffffffffffffffff, 0xa, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000080)=[0x8000, 0x401, 0x1, 0x40, 0x496, 0x3, 0x5, 0x80000000, 0x8000], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8) (async) syz_open_dev$dri(&(0x7f0000000140), 0x3, 0x420042) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x4189, 0x5}) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:39:19 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x5) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x5) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x5) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x521c0) mmap$snddsp(&(0x7f0000f65000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r0, 0xf000) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x5) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x521c0) (async) mmap$snddsp(&(0x7f0000f65000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r0, 0xf000) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cd8000/0x3000)=nil, &(0x7f0000d46000/0x2000)=nil, &(0x7f0000d4b000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d99000/0x3000)=nil, &(0x7f0000dcb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f07000/0x2000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e70000/0x1000)=nil, &(0x7f0000000000)="ce94732e4765d6465ece100c6c3d3f3bd90771cf384ac75cb78ca09072ae29592ad3834c9824820a43fc5a49624d9899a05909009f54bccd34422b3cfa896e3b0510dde3059598dadb731b", 0x4b}, 0x68) 11:39:19 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffffb) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x7f, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x7, 0x3ff, 0xc9, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x65, 0x0, 0xad, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x200}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x1b, 0x7e, [@remote, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "6049fade74b99a6d9c1d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) keyctl$link(0x8, 0x0, 0xfffffffffffffffb) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x7f, 0xa, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x7, 0x3ff, 0xc9, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x65, 0x0, 0xad, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x200}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x1b, 0x7e, [@remote, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "6049fade74b99a6d9c1d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) (async) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x5, 0x2) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 4: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x5) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 3: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, r2, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$setperm(0x5, r0, 0x2000208) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 11:39:19 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffffb) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x7f, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x7, 0x3ff, 0xc9, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x65, 0x0, 0xad, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x24, 0x11, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x200}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0x1b, 0x7e, [@remote, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @cipso={0x86, 0x12, 0x0, [{0x7, 0xc, "6049fade74b99a6d9c1d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x5) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x2, 0x521c0) mmap$snddsp(&(0x7f0000f65000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r0, 0xf000) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cd8000/0x3000)=nil, &(0x7f0000d46000/0x2000)=nil, &(0x7f0000d4b000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d99000/0x3000)=nil, &(0x7f0000dcb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f07000/0x2000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e70000/0x1000)=nil, &(0x7f0000000000)="ce94732e4765d6465ece100c6c3d3f3bd90771cf384ac75cb78ca09072ae29592ad3834c9824820a43fc5a49624d9899a05909009f54bccd34422b3cfa896e3b0510dde3059598dadb731b", 0x4b}, 0x68) (rerun: 64) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000cd6000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000fba000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x7, 0xa, 0x3) 11:39:19 executing program 3: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, r2, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$setperm(0x5, r0, 0x2000208) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', r0) (async) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, r2, 0x0) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) keyctl$setperm(0x5, r0, 0x2000208) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) 11:39:19 executing program 4: mbind(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x4) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ca6000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x5) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000eab000/0x4000)=nil, 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000cd6000/0x4000)=nil) (async) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000fba000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cd8000/0x3000)=nil, &(0x7f0000d46000/0x2000)=nil, &(0x7f0000d4b000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000d99000/0x3000)=nil, &(0x7f0000dcb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f07000/0x2000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000e70000/0x1000)=nil, &(0x7f0000000000)="ce94732e4765d6465ece100c6c3d3f3bd90771cf384ac75cb78ca09072ae29592ad3834c9824820a43fc5a49624d9899a05909009f54bccd34422b3cfa896e3b0510dde3059598dadb731b", 0x4b}, 0x68) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x7, 0xa, 0x3) 11:39:19 executing program 4: mbind(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x4) (async) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ca6000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x5) 11:39:19 executing program 3: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, r2, 0x0) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) keyctl$setperm(0x5, r0, 0x2000208) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', r0) (async) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, r2, 0x0) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) (async) keyctl$setperm(0x5, r0, 0x2000208) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000180)=0x7, 0xa, 0x3) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000cd6000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000fba000/0x2000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000e4e000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xe000) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000eab000/0x4000)=nil, 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 11:39:19 executing program 4: mbind(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x4) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ca6000/0x1000)=nil) (async) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ca6000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x5) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x5, 0x4) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000e4e000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xe000) 11:39:19 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/23, &(0x7f0000000240)=0x17) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000140)=""/55, 0x37) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000180), 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000001c0)=0x25f, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0xa56b, 0x8480) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x7, 0xa19d, 0x3, 0x0, 0xd}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ece000/0x2000)=nil, 0x2000}}) 11:39:19 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x4000080) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000eab000/0x4000)=nil, 0x2) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000eab000/0x4000)=nil, 0x2) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x1, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) 11:39:19 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = userfaultfd(0x80800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x5, 0x4) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x1) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000e4e000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xe000) 11:39:19 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = userfaultfd(0x80800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) 11:39:19 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x4000080) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/23, &(0x7f0000000240)=0x17) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000140)=""/55, 0x37) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000180), 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000001c0)=0x25f, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0xa56b, 0x8480) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x7, 0xa19d, 0x3, 0x0, 0xd}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ece000/0x2000)=nil, 0x2000}}) 11:39:19 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x5, 0x4) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x5, 0x4) (async) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x6) mmap$dsp(&(0x7f0000c02000/0x4000)=nil, 0x4000, 0x9, 0x30, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 64) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (rerun: 64) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) mmap$perf(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x1) (rerun: 64) 11:39:19 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x4000080) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = userfaultfd(0x80800) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000ffb000/0x4000)=nil, 0x0) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) userfaultfd(0x80800) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r0, 0x0) (async) 11:39:19 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:19 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/23, &(0x7f0000000240)=0x17) (async) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000140)=""/55, 0x37) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000180), 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000001c0)=0x25f, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0xa56b, 0x8480) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x7, 0xa19d, 0x3, 0x0, 0xd}) (async) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ece000/0x2000)=nil, 0x2000}}) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x6) mmap$dsp(&(0x7f0000c02000/0x4000)=nil, 0x4000, 0x9, 0x30, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x6) (async) mmap$dsp(&(0x7f0000c02000/0x4000)=nil, 0x4000, 0x9, 0x30, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$perf(&(0x7f0000f8c000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x1) 11:39:19 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f1e000/0x3000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x248101) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) mmap$KVM_VCPU(&(0x7f0000caa000/0x4000)=nil, 0x930, 0x0, 0x20010, r1, 0x0) 11:39:19 executing program 3: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080), 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) 11:39:19 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x6) (async) mmap$dsp(&(0x7f0000c02000/0x4000)=nil, 0x4000, 0x9, 0x30, 0xffffffffffffffff, 0x0) (async, rerun: 64) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:19 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000ef4000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8000000000000000, 0x5, 0x2) 11:39:19 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:19 executing program 3: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080), 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080), 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) (async) 11:39:19 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f1e000/0x3000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x248101) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x248101) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) mmap$KVM_VCPU(&(0x7f0000caa000/0x4000)=nil, 0x930, 0x0, 0x20010, r1, 0x0) 11:39:19 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:20 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mbind(&(0x7f0000ef4000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8000000000000000, 0x5, 0x2) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x4, 0xa, 0x0) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x7, 0x5, 0x3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0xffffffffffff0001, 0x2f, 0x4) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r0, 0x7000) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f1e000/0x3000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x248101) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x248101) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) mmap$KVM_VCPU(&(0x7f0000caa000/0x4000)=nil, 0x930, 0x0, 0x20010, r1, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000caa000/0x4000)=nil, 0x930, 0x0, 0x20010, r1, 0x0) 11:39:20 executing program 3: r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x10}, 0x10) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080), 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) 11:39:20 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000ef4000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x8000000000000000, 0x5, 0x2) 11:39:20 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x4, 0xa, 0x0) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x7, 0x5, 0x3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0xffffffffffff0001, 0x2f, 0x4) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r0, 0x7000) 11:39:20 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000f1a000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x6) 11:39:20 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x1) 11:39:20 executing program 4: bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 3: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:20 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000f1a000/0x1000)=nil) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x6) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x4, 0xa, 0x0) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000000)=0x7, 0x5, 0x3) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0xffffffffffff0001, 0x2f, 0x4) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, r0, 0x7000) 11:39:20 executing program 3: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:20 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x1) 11:39:20 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:20 executing program 4: bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 64) 11:39:20 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x2) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000f1a000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffc000/0x4000)=nil, 0x6) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x3079a36193a1b644) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x80010, r0, 0x0) 11:39:20 executing program 3: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:20 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x1) 11:39:20 executing program 4: bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7) mbind(&(0x7f0000ea9000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x9, 0x2) get_mempolicy(0x0, 0x0, 0x800, &(0x7f0000fff000/0x1000)=nil, 0x1) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x3079a36193a1b644) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x80010, r0, 0x0) 11:39:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4faf, 0x402281) mmap$dsp(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x200000a, 0x100010, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x0, 0x8010, r2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/249) 11:39:20 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x23, 0x3a, [@loopback, @private=0xa010101, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @multicast1]}]}}}}}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', r0, 0x40, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x57, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xa6, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000008) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d5f000/0x1000)=nil, 0xae, 0x2, 0x80}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ed3000/0x3000)=nil) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0xffffffffffffffff) 11:39:20 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7) (async) mbind(&(0x7f0000ea9000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x9, 0x2) get_mempolicy(0x0, 0x0, 0x800, &(0x7f0000fff000/0x1000)=nil, 0x1) 11:39:20 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x3079a36193a1b644) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x3079a36193a1b644) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x80010, r0, 0x0) 11:39:20 executing program 0: mlock(&(0x7f0000db7000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4faf, 0x402281) mmap$dsp(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x200000a, 0x100010, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x0, 0x8010, r2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/249) 11:39:20 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) 11:39:20 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x23, 0x3a, [@loopback, @private=0xa010101, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @multicast1]}]}}}}}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', r0, 0x40, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x57, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xa6, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000008) (rerun: 32) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d5f000/0x1000)=nil, 0xae, 0x2, 0x80}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ed3000/0x3000)=nil) (async, rerun: 64) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0xffffffffffffffff) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x7) mbind(&(0x7f0000ea9000/0x4000)=nil, 0x4000, 0x4001, &(0x7f0000000000)=0x3, 0x9, 0x2) get_mempolicy(0x0, 0x0, 0x800, &(0x7f0000fff000/0x1000)=nil, 0x1) (async) get_mempolicy(0x0, 0x0, 0x800, &(0x7f0000fff000/0x1000)=nil, 0x1) 11:39:20 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0xffffc8eb, 0x0, 0x3f}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x2}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:20 executing program 0: mlock(&(0x7f0000db7000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async, rerun: 32) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async, rerun: 32) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async, rerun: 32) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4faf, 0x402281) (rerun: 32) mmap$dsp(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x200000a, 0x100010, r2, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x0, 0x8010, r2, 0x0) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/249) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = getpid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c5f000/0x1000)=nil, &(0x7f0000d93000/0x3000)=nil], &(0x7f0000000040)=[0x9, 0x4, 0x3, 0x1ff, 0x8, 0x7f, 0x6], &(0x7f0000000080)=[0x0], 0x4) 11:39:20 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0xffffc8eb, 0x0, 0x3f}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x2}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:20 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x10, 0x8000, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0x23, 0x3a, [@loopback, @private=0xa010101, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @multicast1]}]}}}}}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', r0, 0x40, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x57, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xa6, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000008) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d5f000/0x1000)=nil, 0xae, 0x2, 0x80}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ed3000/0x3000)=nil) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0xffffffffffffffff) 11:39:20 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) 11:39:20 executing program 0: mlock(&(0x7f0000db7000/0x4000)=nil, 0x4000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000db7000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:20 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = getpid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c5f000/0x1000)=nil, &(0x7f0000d93000/0x3000)=nil], &(0x7f0000000040)=[0x9, 0x4, 0x3, 0x1ff, 0x8, 0x7f, 0x6], &(0x7f0000000080)=[0x0], 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) getpid() (async) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c5f000/0x1000)=nil, &(0x7f0000d93000/0x3000)=nil], &(0x7f0000000040)=[0x9, 0x4, 0x3, 0x1ff, 0x8, 0x7f, 0x6], &(0x7f0000000080)=[0x0], 0x4) (async) 11:39:20 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r0, 0x10000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100, &(0x7f0000ffc000/0x4000)=nil, 0x3) 11:39:20 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$clear(0x7, r2) keyctl$unlink(0x9, r1, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffff8) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x401, 0x200000) mmap$snddsp(&(0x7f0000d08000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r3, 0x4000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:20 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0xffffc8eb, 0x0, 0x3f}) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x2}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x2, 0xffffc8eb, 0x0, 0x3f}) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x2}) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) 11:39:20 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munlock(&(0x7f0000e47000/0x1000)=nil, 0x1000) 11:39:20 executing program 1: mincore(&(0x7f0000fac000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/194) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r0, 0x10000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100, &(0x7f0000ffc000/0x4000)=nil, 0x3) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 32) r0 = getpid() move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f0000c5f000/0x1000)=nil, &(0x7f0000d93000/0x3000)=nil], &(0x7f0000000040)=[0x9, 0x4, 0x3, 0x1ff, 0x8, 0x7f, 0x6], &(0x7f0000000080)=[0x0], 0x4) 11:39:21 executing program 1: mincore(&(0x7f0000fac000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/194) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mincore(&(0x7f0000fac000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/194) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:21 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$clear(0x7, r2) keyctl$unlink(0x9, r1, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffff8) (async) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffff8) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x401, 0x200000) mmap$snddsp(&(0x7f0000d08000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r3, 0x4000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4000010, r0, 0x10000) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100, &(0x7f0000ffc000/0x4000)=nil, 0x3) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munlock(&(0x7f0000e47000/0x1000)=nil, 0x1000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) munlock(&(0x7f0000e47000/0x1000)=nil, 0x1000) (async) 11:39:21 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000dc2000/0x1000)=nil, 0x930, 0x4, 0x8010, r1, 0x0) mmap$snddsp(&(0x7f0000e2b000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f5e000/0x4000)=nil, &(0x7f0000e4f000/0x1000)=nil, &(0x7f0000f76000/0x4000)=nil, &(0x7f0000fd3000/0x2000)=nil, &(0x7f0000000000)="329e2efa3327b601d5940a4a00a4a0c88dcd09575f016bbf0650e54af1c19d978db4822963375e952bb24da98ba8fbeca89caadd621a6c7cae9e5c759e3b9cfdfd5d996b172c227c4af0d3cb94093d5f1d72cd7624796e47e0bacfd77596ad3424d7df143b436442297e13e69ca4d68d937051a294a9b6efd5532b3864cba024d53b49f639b486500c97d316b3020a5a37345fcadfc0967201af9470dd676b6461924431292776d4095d2cd17c9914b35e09b250449342372547b0112ba59c9174b016b4ba50703ee5e8c5516164e4bf5446332fc012f2e3be8120", 0xdb, r0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x10001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000d74000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/63, 0x3f, 0x0, &(0x7f0000000300)=""/213, 0xd5}, &(0x7f0000000440)=0x40) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x90, 0x1, 0x23, 0x81, 0x0, 0x7, 0x400, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x4428, 0x98d, 0x2, 0x28, 0x4, 0x3, 0x0, 0x80000000, 0x0, 0x1ff}, 0xffffffffffffffff, 0x1, r2, 0x8) 11:39:21 executing program 1: mincore(&(0x7f0000fac000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/194) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000000)="264f4edcdbbc235b9605927cbe6ffed27f549a0c570bfb18922309844549752f92b03f24ce7bcc690b606bef698d9257f8cbfa6b7eb82ea449b2dcd30d71d03a4caa69b9251388942ee6317082a4a8db6f46c59f896412c83c8c145f25777c114d853f56b128ff1d15b987e4dc0c2eb79c496ba8f9085fa0c49460a26600b590039af537dc2cd1a8ed8c976fef373bc4a11003ce8150fb7d984d64fa4ab592bf2d72b0cf8695f0dac9deeb33d8973f2f57b7cf6bffbd3f5249ba5756b8b48ce1de6bbbb2da35245f558279452569d5fb", 0xd0, r0}, 0x68) 11:39:21 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) munlock(&(0x7f0000e47000/0x1000)=nil, 0x1000) 11:39:21 executing program 4: r0 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r0) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$clear(0x7, r2) (async, rerun: 32) keyctl$unlink(0x9, r1, r0) (async, rerun: 32) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffff8) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x401, 0x200000) mmap$snddsp(&(0x7f0000d08000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r3, 0x4000) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000000)="264f4edcdbbc235b9605927cbe6ffed27f549a0c570bfb18922309844549752f92b03f24ce7bcc690b606bef698d9257f8cbfa6b7eb82ea449b2dcd30d71d03a4caa69b9251388942ee6317082a4a8db6f46c59f896412c83c8c145f25777c114d853f56b128ff1d15b987e4dc0c2eb79c496ba8f9085fa0c49460a26600b590039af537dc2cd1a8ed8c976fef373bc4a11003ce8150fb7d984d64fa4ab592bf2d72b0cf8695f0dac9deeb33d8973f2f57b7cf6bffbd3f5249ba5756b8b48ce1de6bbbb2da35245f558279452569d5fb", 0xd0, r0}, 0x68) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000dc2000/0x1000)=nil, 0x930, 0x4, 0x8010, r1, 0x0) mmap$snddsp(&(0x7f0000e2b000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0xf000) (async) mmap$snddsp(&(0x7f0000e2b000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f5e000/0x4000)=nil, &(0x7f0000e4f000/0x1000)=nil, &(0x7f0000f76000/0x4000)=nil, &(0x7f0000fd3000/0x2000)=nil, &(0x7f0000000000)="329e2efa3327b601d5940a4a00a4a0c88dcd09575f016bbf0650e54af1c19d978db4822963375e952bb24da98ba8fbeca89caadd621a6c7cae9e5c759e3b9cfdfd5d996b172c227c4af0d3cb94093d5f1d72cd7624796e47e0bacfd77596ad3424d7df143b436442297e13e69ca4d68d937051a294a9b6efd5532b3864cba024d53b49f639b486500c97d316b3020a5a37345fcadfc0967201af9470dd676b6461924431292776d4095d2cd17c9914b35e09b250449342372547b0112ba59c9174b016b4ba50703ee5e8c5516164e4bf5446332fc012f2e3be8120", 0xdb, r0}, 0x68) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x10001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000d74000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/63, 0x3f, 0x0, &(0x7f0000000300)=""/213, 0xd5}, &(0x7f0000000440)=0x40) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x90, 0x1, 0x23, 0x81, 0x0, 0x7, 0x400, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x4428, 0x98d, 0x2, 0x28, 0x4, 0x3, 0x0, 0x80000000, 0x0, 0x1ff}, 0xffffffffffffffff, 0x1, r2, 0x8) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x90, 0x1, 0x23, 0x81, 0x0, 0x7, 0x400, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x4428, 0x98d, 0x2, 0x28, 0x4, 0x3, 0x0, 0x80000000, 0x0, 0x1ff}, 0xffffffffffffffff, 0x1, r2, 0x8) 11:39:21 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0x0, 0x0) 11:39:21 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={&(0x7f0000c1b000/0x2000)=nil, 0x6, 0x3, 0xc0}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000e0f000/0x3000)=nil, 0x930, 0x2, 0x80010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x80000, 0x3) r1 = getpid() move_pages(r1, 0x4, &(0x7f0000000000)=[&(0x7f0000d3f000/0x14000)=nil, &(0x7f0000db9000/0x4000)=nil, &(0x7f0000e0c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x2) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000400)={0x1c, 0xd47, 0x9}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)={0x0, 0x9, [@local, @local, @local, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece5bf584655", @remote, @broadcast]}) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8520000000000000"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x70, &(0x7f0000000180)=""/112, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000dfb000/0x2000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000e57000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x2000, 0x1000, &(0x7f0000da9000/0x1000)=nil}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8000000000, &(0x7f0000fc5000/0x13000)=nil, 0x6) 11:39:21 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x1000000000000008, 0x7) 11:39:21 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={&(0x7f0000c1b000/0x2000)=nil, 0x6, 0x3, 0xc0}) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000e0f000/0x3000)=nil, 0x930, 0x2, 0x80010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x80000, 0x3) r1 = getpid() move_pages(r1, 0x4, &(0x7f0000000000)=[&(0x7f0000d3f000/0x14000)=nil, &(0x7f0000db9000/0x4000)=nil, &(0x7f0000e0c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x2) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000400)={0x1c, 0xd47, 0x9}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)={0x0, 0x9, [@local, @local, @local, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece5bf584655", @remote, @broadcast]}) (async) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8520000000000000"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x70, &(0x7f0000000180)=""/112, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000dfb000/0x2000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) mmap$perf(&(0x7f0000e57000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x101) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x2000, 0x1000, &(0x7f0000da9000/0x1000)=nil}) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000000000)="264f4edcdbbc235b9605927cbe6ffed27f549a0c570bfb18922309844549752f92b03f24ce7bcc690b606bef698d9257f8cbfa6b7eb82ea449b2dcd30d71d03a4caa69b9251388942ee6317082a4a8db6f46c59f896412c83c8c145f25777c114d853f56b128ff1d15b987e4dc0c2eb79c496ba8f9085fa0c49460a26600b590039af537dc2cd1a8ed8c976fef373bc4a11003ce8150fb7d984d64fa4ab592bf2d72b0cf8695f0dac9deeb33d8973f2f57b7cf6bffbd3f5249ba5756b8b48ce1de6bbbb2da35245f558279452569d5fb", 0xd0, r0}, 0x68) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x4) (async, rerun: 32) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$KVM_VCPU(&(0x7f0000dc2000/0x1000)=nil, 0x930, 0x4, 0x8010, r1, 0x0) mmap$snddsp(&(0x7f0000e2b000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0xf000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f5e000/0x4000)=nil, &(0x7f0000e4f000/0x1000)=nil, &(0x7f0000f76000/0x4000)=nil, &(0x7f0000fd3000/0x2000)=nil, &(0x7f0000000000)="329e2efa3327b601d5940a4a00a4a0c88dcd09575f016bbf0650e54af1c19d978db4822963375e952bb24da98ba8fbeca89caadd621a6c7cae9e5c759e3b9cfdfd5d996b172c227c4af0d3cb94093d5f1d72cd7624796e47e0bacfd77596ad3424d7df143b436442297e13e69ca4d68d937051a294a9b6efd5532b3864cba024d53b49f639b486500c97d316b3020a5a37345fcadfc0967201af9470dd676b6461924431292776d4095d2cd17c9914b35e09b250449342372547b0112ba59c9174b016b4ba50703ee5e8c5516164e4bf5446332fc012f2e3be8120", 0xdb, r0}, 0x68) (async) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x10001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000d74000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/63, 0x3f, 0x0, &(0x7f0000000300)=""/213, 0xd5}, &(0x7f0000000440)=0x40) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x90, 0x1, 0x23, 0x81, 0x0, 0x7, 0x400, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x4428, 0x98d, 0x2, 0x28, 0x4, 0x3, 0x0, 0x80000000, 0x0, 0x1ff}, 0xffffffffffffffff, 0x1, r2, 0x8) 11:39:21 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x1000000000000008, 0x7) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8000000000, &(0x7f0000fc5000/0x13000)=nil, 0x6) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x100000001, 0x1}) 11:39:21 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={&(0x7f0000c1b000/0x2000)=nil, 0x6, 0x3, 0xc0}) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000e0f000/0x3000)=nil, 0x930, 0x2, 0x80010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x80000, 0x3) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4000, 0x0, 0x80000, 0x3) r1 = getpid() move_pages(r1, 0x4, &(0x7f0000000000)=[&(0x7f0000d3f000/0x14000)=nil, &(0x7f0000db9000/0x4000)=nil, &(0x7f0000e0c000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x2) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000400)={0x1c, 0xd47, 0x9}) (async) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000400)={0x1c, 0xd47, 0x9}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)={0x0, 0x9, [@local, @local, @local, @multicast, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece5bf584655", @remote, @broadcast]}) r3 = syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8520000000000000"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x70, &(0x7f0000000180)=""/112, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8520000000000000"], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x70, &(0x7f0000000180)=""/112, 0x41100, 0x1, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3f, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2]}, 0x80) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x100000001, 0x1}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x100000001, 0x1}) (async) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x4002) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000cd8000/0x4000)=nil, 0x5, 0x4, 0x20}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000dfb000/0x2000)=nil) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 64) mmap$perf(&(0x7f0000e57000/0x1000)=nil, 0x1000, 0x3000008, 0x100010, r0, 0x101) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x2000, 0x1000, &(0x7f0000da9000/0x1000)=nil}) (async) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 11:39:21 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000f42000/0x1000)=nil) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000eb3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/37, 0x25, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x4002) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000cd8000/0x4000)=nil, 0x5, 0x4, 0x20}) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) 11:39:21 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x1000000000000008, 0x7) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8000000000, &(0x7f0000fc5000/0x13000)=nil, 0x6) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d8e000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x3, 0x3) mincore(&(0x7f0000d8e000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/158) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x4002) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000cd8000/0x4000)=nil, 0x5, 0x4, 0x20}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000f42000/0x1000)=nil) socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000eb3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/37, 0x25, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 11:39:21 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x3c}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004840}, 0x20000011) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:21 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x100000001, 0x1}) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d8e000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x3, 0x3) (async) mbind(&(0x7f0000d8e000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x3, 0x3) mincore(&(0x7f0000d8e000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/158) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="009f6f0f6ec18a7f5604a4855ac91102012d", @ANYRES32=0x0, @ANYBLOB="0c009900000200006c000000"], 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0xc000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x100000001, 0xc00) syz_open_dev$mouse(&(0x7f00000001c0), 0x81, 0x280800) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r4}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000c0a000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000d8e000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x3, 0x3) mincore(&(0x7f0000d8e000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/158) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x3c}}, 0x4000040) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004840}, 0x20000011) (async, rerun: 32) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (rerun: 32) 11:39:21 executing program 5: socketpair(0x1e, 0x4, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1f}, 0x10) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000480)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xfffffffffffffff7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/207, 0xcf, 0x0, &(0x7f0000000240)=""/68, 0x44}, &(0x7f0000000300)=0x40) 11:39:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="009f6f0f6ec18a7f5604a4855ac91102012d", @ANYRES32=0x0, @ANYBLOB="0c009900000200006c000000"], 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0xc000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x100000001, 0xc00) syz_open_dev$mouse(&(0x7f00000001c0), 0x81, 0x280800) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r4}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:21 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000f42000/0x1000)=nil) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000eb3000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/37, 0x25, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)=0x40) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x109502) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x9000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) socket$pppoe(0x18, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x5, 0x80000, 0x18eb) connect$vsock_dgram(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c6b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x1, &(0x7f0000000200)=""/106, 0x6a}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x3c}}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004840}, 0x20000011) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) 11:39:21 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x5bb947dfe42a6911) 11:39:21 executing program 5: socketpair(0x1e, 0x4, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1f}, 0x10) (async, rerun: 32) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) (async, rerun: 64) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000480)) (async, rerun: 64) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xfffffffffffffff7, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/207, 0xcf, 0x0, &(0x7f0000000240)=""/68, 0x44}, &(0x7f0000000300)=0x40) 11:39:21 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="009f6f0f6ec18a7f5604a4855ac91102012d", @ANYRES32=0x0, @ANYBLOB="0c009900000200006c000000"], 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0xc000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) r2 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async, rerun: 64) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x100000001, 0xc00) (async, rerun: 64) syz_open_dev$mouse(&(0x7f00000001c0), 0x81, 0x280800) (rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r4}) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mmap$dsp(&(0x7f0000c0a000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 11:39:21 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x109502) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x9000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) socket$pppoe(0x18, 0x1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x5, 0x80000, 0x18eb) connect$vsock_dgram(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c6b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x1, &(0x7f0000000200)=""/106, 0x6a}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="040029bd7000fcdbdf2502000200", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000804) 11:39:21 executing program 5: socketpair(0x1e, 0x4, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1f}, 0x10) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)) (async, rerun: 64) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) (rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000480)) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xfffffffffffffff7, 0x0) (async, rerun: 64) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/207, 0xcf, 0x0, &(0x7f0000000240)=""/68, 0x44}, &(0x7f0000000300)=0x40) 11:39:21 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000000), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x5bb947dfe42a6911) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x5bb947dfe42a6911) 11:39:21 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000c0a000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 11:39:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="040029bd7000fcdbdf2502000200", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000804) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="040029bd7000fcdbdf2502000200", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000804) (async) 11:39:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="040029bd7000fcdbdf2502000200", @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000804) 11:39:22 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x100000001, &(0x7f0000f91000/0x3000)=nil, 0x5) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f37000/0x2000)=nil}) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x109502) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x9000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) socket$pppoe(0x18, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x5, 0x80000, 0x18eb) connect$vsock_dgram(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c6b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x1, &(0x7f0000000200)=""/106, 0x6a}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x109502) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$snddsp(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x9000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) socket$pppoe(0x18, 0x1, 0x0) (async) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x5, 0x80000, 0x18eb) (async) connect$vsock_dgram(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c6b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/190, 0xbe, 0x1, &(0x7f0000000200)=""/106, 0x6a}, &(0x7f0000000180)=0x40) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000dcc000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x100000001, &(0x7f0000f91000/0x3000)=nil, 0x5) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 64) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f37000/0x2000)=nil}) (rerun: 64) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000000), 0x7, &(0x7f0000fff000/0x1000)=nil, 0x5bb947dfe42a6911) 11:39:22 executing program 2: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x0, 0xfa}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x730}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff0001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}]}, 0x44}}, 0xa000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000dcc000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x1) (async) mmap$perf(&(0x7f0000dcc000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mmap$dsp(&(0x7f0000c33000/0x3000)=nil, 0x3000, 0x300000e, 0x1030, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000e53000/0x3000)=nil, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x5000, 0x2000, &(0x7f0000e04000/0x2000)=nil}) 11:39:22 executing program 2: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x0, 0xfa}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x730}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff0001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}]}, 0x44}}, 0xa000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0xfffffffffffffffc, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fd2000/0x1000)=nil, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) 11:39:22 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x100000001, &(0x7f0000f91000/0x3000)=nil, 0x5) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f37000/0x2000)=nil}) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) 11:39:22 executing program 4: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$perf(&(0x7f0000dcc000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mmap$dsp(&(0x7f0000c33000/0x3000)=nil, 0x3000, 0x300000e, 0x1030, 0xffffffffffffffff, 0x0) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000e53000/0x3000)=nil, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x5000, 0x2000, &(0x7f0000e04000/0x2000)=nil}) 11:39:22 executing program 2: ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x0, 0xfa}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x12}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x730}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff0001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}]}, 0x44}}, 0xa000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x2, 0x100010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0xfffffffffffffffc, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fd2000/0x1000)=nil, 0x2) (async, rerun: 64) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) (rerun: 64) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:22 executing program 4: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mmap$dsp(&(0x7f0000c33000/0x3000)=nil, 0x3000, 0x300000e, 0x1030, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x8, &(0x7f0000e53000/0x3000)=nil, 0x3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0x5000, 0x2000, &(0x7f0000e04000/0x2000)=nil}) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f2e000/0x2000)=nil, 0x0) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) 11:39:22 executing program 2: socket$pppoe(0x18, 0x1, 0x0) socket(0x29, 0x3, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x16100) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0xfffffffffffffffc, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fd2000/0x1000)=nil, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) (async) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mincore(&(0x7f0000dd0000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/166) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 4: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)={'bond_slave_0\x00', 0x400}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f2e000/0x2000)=nil, 0x0) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8001, 0x0, 0xe92a, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = getpid() mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/186) getpid() move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0xfffffff7, 0x81, 0x3, 0x3, 0x1, 0x7, 0x100, 0x10000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1) 11:39:22 executing program 2: socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) socket(0x29, 0x3, 0x0) (rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x16100) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) (rerun: 64) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000f2e000/0x2000)=nil, 0x0) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mincore(&(0x7f0000dd0000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/166) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a200, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x1010, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = getpid() mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/186) (async) getpid() (async) move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0xfffffff7, 0x81, 0x3, 0x3, 0x1, 0x7, 0x100, 0x10000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mincore(&(0x7f0000dd0000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/166) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8001, 0x0, 0xe92a, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 2: socket$pppoe(0x18, 0x1, 0x0) (async) socket(0x29, 0x3, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x16100) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = getpid() mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/186) getpid() (async) getpid() move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0xfffffff7, 0x81, 0x3, 0x3, 0x1, 0x7, 0x100, 0x10000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000eb8000/0x1000)=nil, 0x1000}}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5f1, 0x0) mmap$snddsp(&(0x7f0000c33000/0x6000)=nil, 0x6000, 0xf, 0x10, r0, 0x5) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 2: keyctl$clear(0x7, 0xfffffffffffffffc) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8040, 0x8, 0x800, 0x40, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0xe7, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @generic={0x82, 0xc, "277cf677f7e096147a95"}]}}}}}) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x6, 0x20, [0x34, 0x59, 0x66, 0x39, 0x38, 0x38, 0x33]}, 0x45, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x240048c4) 11:39:22 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a200, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x1010, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8001, 0x0, 0xe92a, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5f1, 0x0) mmap$snddsp(&(0x7f0000c33000/0x6000)=nil, 0x6000, 0xf, 0x10, r0, 0x5) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 2: keyctl$clear(0x7, 0xfffffffffffffffc) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8040, 0x8, 0x800, 0x40, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0xe7, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @generic={0x82, 0xc, "277cf677f7e096147a95"}]}}}}}) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x6, 0x20, [0x34, 0x59, 0x66, 0x39, 0x38, 0x38, 0x33]}, 0x45, r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x240048c4) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 11:39:22 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (rerun: 32) pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000eb8000/0x1000)=nil, 0x1000}}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffffffffffffffff, 0x720c1) mmap$KVM_VCPU(&(0x7f0000eff000/0x1000)=nil, 0x930, 0x0, 0x810, r0, 0x0) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000dca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/126, 0x7e, 0x0, &(0x7f0000000180)=""/168, 0xa8}, &(0x7f0000000280)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ec3000/0x2000)=nil, &(0x7f0000c9e000/0x2000)=nil, &(0x7f0000dfe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000da0000/0x4000)=nil, &(0x7f0000db4000/0x3000)=nil, &(0x7f0000de9000/0x4000)=nil, &(0x7f0000e9a000/0x1000)=nil, &(0x7f0000c48000/0x3000)=nil, &(0x7f0000eaa000/0x3000)=nil, &(0x7f0000000000)="7a86ce1993430688", 0x8, r1}, 0x68) 11:39:22 executing program 2: keyctl$clear(0x7, 0xfffffffffffffffc) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8040, 0x8, 0x800, 0x40, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0xe7, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @generic={0x82, 0xc, "277cf677f7e096147a95"}]}}}}}) r2 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x6, 0x20, [0x34, 0x59, 0x66, 0x39, 0x38, 0x38, 0x33]}, 0x45, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044480) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x240048c4) keyctl$clear(0x7, 0xfffffffffffffffc) (async) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8040, 0x8, 0x800, 0x40, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x65, 0x0, 0xe7, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @generic={0x82, 0xc, "277cf677f7e096147a95"}]}}}}}) (async) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r2) (async) keyctl$instantiate(0xc, 0x0, &(0x7f00000003c0)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x6, 0x20, [0x34, 0x59, 0x66, 0x39, 0x38, 0x38, 0x33]}, 0x45, r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044480) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x240048c4) (async) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5f1, 0x0) mmap$snddsp(&(0x7f0000c33000/0x6000)=nil, 0x6000, 0xf, 0x10, r0, 0x5) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 11:39:22 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0a200, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x1010, r0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:22 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x1000, 0x1, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffffffffffffffff, 0x720c1) mmap$KVM_VCPU(&(0x7f0000eff000/0x1000)=nil, 0x930, 0x0, 0x810, r0, 0x0) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000dca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/126, 0x7e, 0x0, &(0x7f0000000180)=""/168, 0xa8}, &(0x7f0000000280)=0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ec3000/0x2000)=nil, &(0x7f0000c9e000/0x2000)=nil, &(0x7f0000dfe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000da0000/0x4000)=nil, &(0x7f0000db4000/0x3000)=nil, &(0x7f0000de9000/0x4000)=nil, &(0x7f0000e9a000/0x1000)=nil, &(0x7f0000c48000/0x3000)=nil, &(0x7f0000eaa000/0x3000)=nil, &(0x7f0000000000)="7a86ce1993430688", 0x8, r1}, 0x68) 11:39:23 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000eb8000/0x1000)=nil, 0x1000}}) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000eb8000/0x1000)=nil, 0x1000}}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x1000, 0x1, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffffffffffffffff, 0x720c1) mmap$KVM_VCPU(&(0x7f0000eff000/0x1000)=nil, 0x930, 0x0, 0x810, r0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000dca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/126, 0x7e, 0x0, &(0x7f0000000180)=""/168, 0xa8}, &(0x7f0000000280)=0x40) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ec3000/0x2000)=nil, &(0x7f0000c9e000/0x2000)=nil, &(0x7f0000dfe000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000da0000/0x4000)=nil, &(0x7f0000db4000/0x3000)=nil, &(0x7f0000de9000/0x4000)=nil, &(0x7f0000e9a000/0x1000)=nil, &(0x7f0000c48000/0x3000)=nil, &(0x7f0000eaa000/0x3000)=nil, &(0x7f0000000000)="7a86ce1993430688", 0x8, r1}, 0x68) (rerun: 64) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:23 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001500)=[{&(0x7f0000001280)="ed8839cc2a06f54b8c5fb9e95a0ae391382c3396b79db914c135f0fdcc5a83c42b38d9c980e7dfa8be778ff09f200e0e3eed3feadb5b77e1b6d40e0c85de8334da4f803010de7bb9ebd831509e703bdbb2acfd73c7ba4551cec21b00cb2c1a69fb553b59c4e8b26ad0dd71e6de178c4fab1db60d840016902781e2996b6b8eb965c4641599910fb72bb5832726c071446fe1e135b16a701b2971bb55a5c1cbbd9f0c9e60457b21d6601b14077ed20618b6c8acf14a3390ca8fedad86ff16eef731b8af00b445d435b92ea99ae5a9e74d23bdabbb4bbe3645b0134da92a5f8e6acac3", 0xe2}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001380)="704e45d6affc504bf2805bea6d74dca289c7ce669e5b9af1bcca200326dbcda8393a3995f7eaffce909a352e3c3aa5102c60a529d0af708712bce05f08280cfbf4e34783071e81ba622391ceee85c00ae05ef03eab23a38552959e21dc1aca6695ef63f6eeb85fe20b2ac352eea106ac4c30ca57650a511f2dd5e15a191eb4f6dafbce13d72e4cd95a3c620393ae7596539728e35fa400f26e89a98cb41fc2201aeb4bd7e4efb7169aad9715", 0xac}, {&(0x7f0000001440)="a9b013bb52639ad1f777c62029cd27530070054b06314982", 0x18}, {&(0x7f0000001480)="a2b1478eb686a9591c6f6caaa8408b728d3436ae8689fdd194cc3978a1ada65e10ef8ea4c0c87ed2666f92c6c227384cb3a6573a8b74cbefd6cc2a16ff7f7c190904efd40a0c8fca9615ebb5e0d875a91298e60a6b0819392e9ff22d9093db9a032fbefab7", 0x65}], 0x5, r2) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x30, 0xffffffffffffffff, 0xfffffffffffffff9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x10000000000, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = syz_open_dev$mouse(&(0x7f0000001900), 0x1c, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) keyctl$unlink(0x9, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r3, 0x0, 0x25, 0x11}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000c6e000/0x2000)=nil, &(0x7f0000999000/0x2000)=nil, &(0x7f0000954000/0x3000)=nil, &(0x7f0000a15000/0x1000)=nil, &(0x7f0000806000/0x3000)=nil, &(0x7f0000a33000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bdc000/0x4000)=nil, &(0x7f0000a14000/0x2000)=nil, &(0x7f00008a8000/0x2000)=nil, &(0x7f0000d1f000/0x4000)=nil, &(0x7f00000001c0)="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", 0x1000, r5}, 0x68) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x1000, 0x1, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x10, 0x5) mlock(&(0x7f0000ff0000/0xe000)=nil, 0xe000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/128, 0x80, 0x0, &(0x7f0000000100)=""/56, 0x38}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x7) 11:39:23 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d31000/0x3000)=nil, 0x101, 0xd9a4e3b3f4541f64, 0x4}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001500)=[{&(0x7f0000001280)="ed8839cc2a06f54b8c5fb9e95a0ae391382c3396b79db914c135f0fdcc5a83c42b38d9c980e7dfa8be778ff09f200e0e3eed3feadb5b77e1b6d40e0c85de8334da4f803010de7bb9ebd831509e703bdbb2acfd73c7ba4551cec21b00cb2c1a69fb553b59c4e8b26ad0dd71e6de178c4fab1db60d840016902781e2996b6b8eb965c4641599910fb72bb5832726c071446fe1e135b16a701b2971bb55a5c1cbbd9f0c9e60457b21d6601b14077ed20618b6c8acf14a3390ca8fedad86ff16eef731b8af00b445d435b92ea99ae5a9e74d23bdabbb4bbe3645b0134da92a5f8e6acac3", 0xe2}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001380)="704e45d6affc504bf2805bea6d74dca289c7ce669e5b9af1bcca200326dbcda8393a3995f7eaffce909a352e3c3aa5102c60a529d0af708712bce05f08280cfbf4e34783071e81ba622391ceee85c00ae05ef03eab23a38552959e21dc1aca6695ef63f6eeb85fe20b2ac352eea106ac4c30ca57650a511f2dd5e15a191eb4f6dafbce13d72e4cd95a3c620393ae7596539728e35fa400f26e89a98cb41fc2201aeb4bd7e4efb7169aad9715", 0xac}, {&(0x7f0000001440)="a9b013bb52639ad1f777c62029cd27530070054b06314982", 0x18}, {&(0x7f0000001480)="a2b1478eb686a9591c6f6caaa8408b728d3436ae8689fdd194cc3978a1ada65e10ef8ea4c0c87ed2666f92c6c227384cb3a6573a8b74cbefd6cc2a16ff7f7c190904efd40a0c8fca9615ebb5e0d875a91298e60a6b0819392e9ff22d9093db9a032fbefab7", 0x65}], 0x5, r2) (async) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001500)=[{&(0x7f0000001280)="ed8839cc2a06f54b8c5fb9e95a0ae391382c3396b79db914c135f0fdcc5a83c42b38d9c980e7dfa8be778ff09f200e0e3eed3feadb5b77e1b6d40e0c85de8334da4f803010de7bb9ebd831509e703bdbb2acfd73c7ba4551cec21b00cb2c1a69fb553b59c4e8b26ad0dd71e6de178c4fab1db60d840016902781e2996b6b8eb965c4641599910fb72bb5832726c071446fe1e135b16a701b2971bb55a5c1cbbd9f0c9e60457b21d6601b14077ed20618b6c8acf14a3390ca8fedad86ff16eef731b8af00b445d435b92ea99ae5a9e74d23bdabbb4bbe3645b0134da92a5f8e6acac3", 0xe2}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001380)="704e45d6affc504bf2805bea6d74dca289c7ce669e5b9af1bcca200326dbcda8393a3995f7eaffce909a352e3c3aa5102c60a529d0af708712bce05f08280cfbf4e34783071e81ba622391ceee85c00ae05ef03eab23a38552959e21dc1aca6695ef63f6eeb85fe20b2ac352eea106ac4c30ca57650a511f2dd5e15a191eb4f6dafbce13d72e4cd95a3c620393ae7596539728e35fa400f26e89a98cb41fc2201aeb4bd7e4efb7169aad9715", 0xac}, {&(0x7f0000001440)="a9b013bb52639ad1f777c62029cd27530070054b06314982", 0x18}, {&(0x7f0000001480)="a2b1478eb686a9591c6f6caaa8408b728d3436ae8689fdd194cc3978a1ada65e10ef8ea4c0c87ed2666f92c6c227384cb3a6573a8b74cbefd6cc2a16ff7f7c190904efd40a0c8fca9615ebb5e0d875a91298e60a6b0819392e9ff22d9093db9a032fbefab7", 0x65}], 0x5, r2) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r1) (async) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x30, 0xffffffffffffffff, 0xfffffffffffffff9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x10000000000, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = syz_open_dev$mouse(&(0x7f0000001900), 0x1c, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) keyctl$unlink(0x9, 0x0, r0) (async) keyctl$unlink(0x9, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r3, 0x0, 0x25, 0x11}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000c6e000/0x2000)=nil, &(0x7f0000999000/0x2000)=nil, &(0x7f0000954000/0x3000)=nil, &(0x7f0000a15000/0x1000)=nil, &(0x7f0000806000/0x3000)=nil, &(0x7f0000a33000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bdc000/0x4000)=nil, &(0x7f0000a14000/0x2000)=nil, &(0x7f00008a8000/0x2000)=nil, &(0x7f0000d1f000/0x4000)=nil, &(0x7f00000001c0)="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", 0x1000, r5}, 0x68) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d31000/0x3000)=nil, 0x101, 0xd9a4e3b3f4541f64, 0x4}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d31000/0x3000)=nil, 0x101, 0xd9a4e3b3f4541f64, 0x4}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x50) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/140, 0x8c, 0x1, &(0x7f00000001c0)=""/185, 0xb9}, &(0x7f0000000280)=0x40) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x10, 0x5) mlock(&(0x7f0000ff0000/0xe000)=nil, 0xe000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/128, 0x80, 0x0, &(0x7f0000000100)=""/56, 0x38}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x7) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x10, 0x5) (async) mlock(&(0x7f0000ff0000/0xe000)=nil, 0xe000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/128, 0x80, 0x0, &(0x7f0000000100)=""/56, 0x38}, &(0x7f0000000180)=0x40) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x7) (async) 11:39:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = add_key$keyring(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) (async) r2 = request_key(&(0x7f0000001d40)='pkcs7_test\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)='/dev/input/mouse#\x00', r1) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001500)=[{&(0x7f0000001280)="ed8839cc2a06f54b8c5fb9e95a0ae391382c3396b79db914c135f0fdcc5a83c42b38d9c980e7dfa8be778ff09f200e0e3eed3feadb5b77e1b6d40e0c85de8334da4f803010de7bb9ebd831509e703bdbb2acfd73c7ba4551cec21b00cb2c1a69fb553b59c4e8b26ad0dd71e6de178c4fab1db60d840016902781e2996b6b8eb965c4641599910fb72bb5832726c071446fe1e135b16a701b2971bb55a5c1cbbd9f0c9e60457b21d6601b14077ed20618b6c8acf14a3390ca8fedad86ff16eef731b8af00b445d435b92ea99ae5a9e74d23bdabbb4bbe3645b0134da92a5f8e6acac3", 0xe2}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001380)="704e45d6affc504bf2805bea6d74dca289c7ce669e5b9af1bcca200326dbcda8393a3995f7eaffce909a352e3c3aa5102c60a529d0af708712bce05f08280cfbf4e34783071e81ba622391ceee85c00ae05ef03eab23a38552959e21dc1aca6695ef63f6eeb85fe20b2ac352eea106ac4c30ca57650a511f2dd5e15a191eb4f6dafbce13d72e4cd95a3c620393ae7596539728e35fa400f26e89a98cb41fc2201aeb4bd7e4efb7169aad9715", 0xac}, {&(0x7f0000001440)="a9b013bb52639ad1f777c62029cd27530070054b06314982", 0x18}, {&(0x7f0000001480)="a2b1478eb686a9591c6f6caaa8408b728d3436ae8689fdd194cc3978a1ada65e10ef8ea4c0c87ed2666f92c6c227384cb3a6573a8b74cbefd6cc2a16ff7f7c190904efd40a0c8fca9615ebb5e0d875a91298e60a6b0819392e9ff22d9093db9a032fbefab7", 0x65}], 0x5, r2) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r1) (async) keyctl$search(0xa, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x30, 0xffffffffffffffff, 0xfffffffffffffff9) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x10000000000, 0x1) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x10000000000, 0x1) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = syz_open_dev$mouse(&(0x7f0000001900), 0x1c, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) keyctl$unlink(0x9, 0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r3, 0x0, 0x25, 0x11}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001200)={&(0x7f0000c6e000/0x2000)=nil, &(0x7f0000999000/0x2000)=nil, &(0x7f0000954000/0x3000)=nil, &(0x7f0000a15000/0x1000)=nil, &(0x7f0000806000/0x3000)=nil, &(0x7f0000a33000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bdc000/0x4000)=nil, &(0x7f0000a14000/0x2000)=nil, &(0x7f00008a8000/0x2000)=nil, &(0x7f0000d1f000/0x4000)=nil, &(0x7f00000001c0)="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", 0x1000, r5}, 0x68) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 4: mbind(&(0x7f0000e31000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000d31000/0x3000)=nil, 0x101, 0xd9a4e3b3f4541f64, 0x4}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x10, 0x5) (async) mlock(&(0x7f0000ff0000/0xe000)=nil, 0xe000) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fea000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/128, 0x80, 0x0, &(0x7f0000000100)=""/56, 0x38}, &(0x7f0000000180)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x7) 11:39:23 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x50) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/140, 0x8c, 0x1, &(0x7f00000001c0)=""/185, 0xb9}, &(0x7f0000000280)=0x40) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x50) (async) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/140, 0x8c, 0x1, &(0x7f00000001c0)=""/185, 0xb9}, &(0x7f0000000280)=0x40) (async) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c63000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 4: mbind(&(0x7f0000e31000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x1) (async) mbind(&(0x7f0000e31000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000eb1000/0x1000)=nil, 0x1000, 0x3000008, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c2a000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r1, 0x1000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ef5000/0x4000)=nil}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f09000/0x4000)=nil, 0x4000}}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c89000/0x4000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, &(0x7f0000c4d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d14000/0x1000)=nil, &(0x7f0000cd4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000de1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ccc000/0x2000)=nil, &(0x7f0000000000)="78c9f8f33336a04926c2449e9e08ef12d31d04f763068829b907ce5b96a7044dfdcc11f0191867853e19a7ec34026f1c87e1e4", 0x33, r0}, 0x68) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x306, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 11:39:23 executing program 4: mbind(&(0x7f0000e31000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mbind(&(0x7f0000e31000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x5, 0x1) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x50) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/140, 0x8c, 0x1, &(0x7f00000001c0)=""/185, 0xb9}, &(0x7f0000000280)=0x40) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x50) (async) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/140, 0x8c, 0x1, &(0x7f00000001c0)=""/185, 0xb9}, &(0x7f0000000280)=0x40) (async) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c89000/0x4000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, &(0x7f0000c4d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d14000/0x1000)=nil, &(0x7f0000cd4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000de1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ccc000/0x2000)=nil, &(0x7f0000000000)="78c9f8f33336a04926c2449e9e08ef12d31d04f763068829b907ce5b96a7044dfdcc11f0191867853e19a7ec34026f1c87e1e4", 0x33, r0}, 0x68) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c89000/0x4000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, &(0x7f0000c4d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d14000/0x1000)=nil, &(0x7f0000cd4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000de1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ccc000/0x2000)=nil, &(0x7f0000000000)="78c9f8f33336a04926c2449e9e08ef12d31d04f763068829b907ce5b96a7044dfdcc11f0191867853e19a7ec34026f1c87e1e4", 0x33, r0}, 0x68) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x306, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) (async) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000eb1000/0x1000)=nil, 0x1000, 0x3000008, r0) (async) pkey_mprotect(&(0x7f0000eb1000/0x1000)=nil, 0x1000, 0x3000008, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c2a000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r1, 0x1000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ef5000/0x4000)=nil}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f09000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f09000/0x4000)=nil, 0x4000}}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c63000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c63000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x60, 0x80800) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0xa, 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f28000/0x2000)=nil, 0x80000001, 0x4, 0x85}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c89000/0x4000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, &(0x7f0000c4d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d14000/0x1000)=nil, &(0x7f0000cd4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000de1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ccc000/0x2000)=nil, &(0x7f0000000000)="78c9f8f33336a04926c2449e9e08ef12d31d04f763068829b907ce5b96a7044dfdcc11f0191867853e19a7ec34026f1c87e1e4", 0x33, r0}, 0x68) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000c89000/0x4000)=nil, &(0x7f0000cff000/0x1000)=nil, &(0x7f0000dad000/0x2000)=nil, &(0x7f0000c4d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d14000/0x1000)=nil, &(0x7f0000cd4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000de1000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ccc000/0x2000)=nil, &(0x7f0000000000)="78c9f8f33336a04926c2449e9e08ef12d31d04f763068829b907ce5b96a7044dfdcc11f0191867853e19a7ec34026f1c87e1e4", 0x33, r0}, 0x68) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x3, 0x2}) 11:39:23 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000eb1000/0x1000)=nil, 0x1000, 0x3000008, r0) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) mmap$snddsp(&(0x7f0000c2a000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r1, 0x1000) (async) mmap$snddsp(&(0x7f0000c2a000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r1, 0x1000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ef5000/0x4000)=nil}) (async) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ef5000/0x4000)=nil}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f09000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000f09000/0x4000)=nil, 0x4000}}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x60, 0x80800) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0xa, 0x4) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f28000/0x2000)=nil, 0x80000001, 0x4, 0x85}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x306, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x3, 0x2}) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000efe000/0x4000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c63000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mmap$snddsp(&(0x7f0000cc0000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xd000) move_pages(0x0, 0x6, &(0x7f0000000000)=[&(0x7f0000fa2000/0x4000)=nil, &(0x7f0000c86000/0x3000)=nil, &(0x7f0000cc0000/0x1000)=nil, &(0x7f0000fda000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000e55000/0x1000)=nil], &(0x7f0000000040)=[0x9, 0x1, 0x51, 0x7, 0xffffffff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) 11:39:23 executing program 4: r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x60, 0x80800) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000100)=0xa, 0x4) (async, rerun: 32) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000f28000/0x2000)=nil, 0x80000001, 0x4, 0x85}) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x3, 0x2}) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000c67000/0x4000)=nil, 0x4000) mbind(&(0x7f0000f94000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x41b, 0x6) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 5: mbind(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async, rerun: 64) mmap$snddsp(&(0x7f0000cc0000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xd000) (async, rerun: 64) move_pages(0x0, 0x6, &(0x7f0000000000)=[&(0x7f0000fa2000/0x4000)=nil, &(0x7f0000c86000/0x3000)=nil, &(0x7f0000cc0000/0x1000)=nil, &(0x7f0000fda000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000e55000/0x1000)=nil], &(0x7f0000000040)=[0x9, 0x1, 0x51, 0x7, 0xffffffff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000efe000/0x4000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000efe000/0x4000)=nil}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180)=0x5, 0x43, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ebb, 0x100) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x930, 0x0, 0x100010, r2, 0x0) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 11:39:23 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/95) 11:39:23 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000c67000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000f94000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x41b, 0x6) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:23 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000efe000/0x4000)=nil}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000efe000/0x4000)=nil}) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:23 executing program 5: mbind(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) (async) mbind(&(0x7f0000cff000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mmap$snddsp(&(0x7f0000cc0000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xd000) move_pages(0x0, 0x6, &(0x7f0000000000)=[&(0x7f0000fa2000/0x4000)=nil, &(0x7f0000c86000/0x3000)=nil, &(0x7f0000cc0000/0x1000)=nil, &(0x7f0000fda000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000e55000/0x1000)=nil], &(0x7f0000000040)=[0x9, 0x1, 0x51, 0x7, 0xffffffff], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4) 11:39:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180)=0x5, 0x43, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ebb, 0x100) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x930, 0x0, 0x100010, r2, 0x0) 11:39:23 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 11:39:23 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/95) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/95) (async) 11:39:24 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000c67000/0x4000)=nil, 0x4000) mbind(&(0x7f0000f94000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x41b, 0x6) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000c67000/0x4000)=nil, 0x4000) (async) mbind(&(0x7f0000f94000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x41b, 0x6) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:24 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f78000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000f78000/0x3000)=nil, 0x4) 11:39:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) (async) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180)=0x5, 0x43, 0x2) (async, rerun: 32) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ebb, 0x100) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ff8000/0x4000)=nil, 0x930, 0x0, 0x100010, r2, 0x0) 11:39:24 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000f48000/0x2000)=nil, 0x2000, 0x1000005, r0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0), 0x4) 11:39:24 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:24 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/95) 11:39:24 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000f78000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x3000)=nil) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) (rerun: 64) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000f78000/0x3000)=nil, 0x4) 11:39:24 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:24 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000f48000/0x2000)=nil, 0x2000, 0x1000005, r0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0), 0x4) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) pkey_alloc(0x0, 0x0) (async) pkey_mprotect(&(0x7f0000f48000/0x2000)=nil, 0x2000, 0x1000005, r0) (async) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0), 0x4) (async) 11:39:24 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 11:39:24 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$dsp(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:24 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000f78000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000f78000/0x3000)=nil, 0x4) 11:39:24 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fd2000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:24 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) mremap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async, rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$dsp(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:24 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 11:39:24 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) (async) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 11:39:24 executing program 0: mlock(&(0x7f0000d82000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x200002) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x6000) 11:39:24 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fd2000/0x1000)=nil) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 11:39:24 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x3) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000f48000/0x2000)=nil, 0x2000, 0x1000005, r0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0), 0x4) 11:39:24 executing program 3: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = pkey_alloc(0x0, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'sit0\x00', r2, 0x1, 0x10, 0x7a, 0x81, {{0x16, 0x4, 0x2, 0x7, 0x58, 0x64, 0x0, 0xbb, 0x29, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0x3c, 0x7b, 0x3, 0x1, [{@multicast1, 0x1f8}, {@loopback}, {@private=0xa010100}, {@multicast1, 0x3ff}, {@local, 0x780e}, {@private=0xa010102, 0x8001}, {@private=0xa010101}]}, @ra={0x94, 0x4}, @noop]}}}}}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg(r3, &(0x7f00000001c0)={0x1, {&(0x7f0000000140)=""/36, 0x24, &(0x7f0000000180)=""/46, 0x2, 0x3}}, 0x48) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r0) 11:39:24 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r0 = syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) mmap$dsp(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) (async) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) (async) mremap(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async) syz_open_dev$mouse(&(0x7f0000001900), 0x9, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) (async) mmap$dsp(&(0x7f0000f45000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x7bd1, &(0x7f0000fff000/0x1000)=nil, 0x3) (async) 11:39:24 executing program 0: mlock(&(0x7f0000d82000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x200002) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x200002) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x6000) 11:39:24 executing program 2: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x4, 0xa, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1fe, 0x0, &(0x7f0000ffb000/0x3000)=nil}) (async) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) (async) 11:39:24 executing program 5: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r0 = getpid() munmap(&(0x7f0000d74000/0x4000)=nil, 0x4000) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000040)=[0x9], 0x0, 0x0) move_pages(r0, 0x9, &(0x7f0000000000)=[&(0x7f0000f97000/0x4000)=nil, &(0x7f0000dcc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d8b000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000ceb000/0x2000)=nil, &(0x7f0000cf8000/0x4000)=nil, &(0x7f0000e2c000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 11:39:24 executing program 4: mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x0) (async) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fd2000/0x1000)=nil) (async, rerun: 32) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) (rerun: 32) [ 773.334953] kasan: CONFIG_KASAN_INLINE enabled [ 773.347329] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 773.359791] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 773.366036] Modules linked in: [ 773.369239] CPU: 0 PID: 30218 Comm: syz-executor.3 Not tainted 4.14.307-syzkaller #0 [ 773.377119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 773.386483] task: ffff88808852a500 task.stack: ffff8880b3680000 [ 773.392556] RIP: 0010:vhost_chr_write_iter+0x873/0x1100 [ 773.397919] RSP: 0018:ffff8880b3687c00 EFLAGS: 00010246 [ 773.403289] RAX: dffffc0000000000 RBX: ffff8880889ea9c0 RCX: 0000000000000000 [ 773.410561] RDX: 0000000000000002 RSI: ffffffff857f16f5 RDI: ffff8880889eaa80 [ 773.417831] RBP: ffffed101113d549 R08: 0000000000000000 R09: 0000000000000000 [ 773.425103] R10: 0000000000000002 R11: ffff88808852a500 R12: 0000000000000002 [ 773.432478] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff110166d0f87 [ 773.439754] FS: 00007ff76614f700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 773.447986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.453869] CR2: 00007ff12a44afc0 CR3: 00000000a9f58000 CR4: 00000000003406f0 [ 773.461142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 773.468412] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 773.475765] Call Trace: [ 773.478363] ? log_write_hva+0x310/0x310 11:39:24 executing program 1: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x0, 0x3) get_mempolicy(0x0, &(0x7f0000000080), 0x0, &(0x7f0000d48000/0x2000)=nil, 0x5) [ 773.482436] ? lock_downgrade+0x740/0x740 [ 773.486608] ? iov_iter_init+0xa6/0x1c0 [ 773.490602] __vfs_write+0x44c/0x630 [ 773.494312] ? kernel_read+0x110/0x110 [ 773.498200] ? rw_verify_area+0xe1/0x2a0 [ 773.502267] vfs_write+0x17f/0x4d0 [ 773.505808] SyS_write+0xf2/0x210 [ 773.509255] ? SyS_read+0x210/0x210 [ 773.512866] ? fput_many+0xe/0x140 [ 773.516390] ? do_syscall_64+0x4c/0x640 [ 773.520358] ? SyS_read+0x210/0x210 [ 773.523979] do_syscall_64+0x1d5/0x640 [ 773.527853] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 773.533025] RIP: 0033:0x7ff767bdd0f9 [ 773.536719] RSP: 002b:00007ff76614f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.544413] RAX: ffffffffffffffda RBX: 00007ff767cfcf80 RCX: 00007ff767bdd0f9 [ 773.551688] RDX: 0000000000000048 RSI: 00000000200001c0 RDI: 0000000000000004 [ 773.558956] RBP: 00007ff767c38ae9 R08: 0000000000000000 R09: 0000000000000000 [ 773.566224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.573482] R13: 00007ffc15988e1f R14: 00007ff76614f300 R15: 0000000000022000 [ 773.580742] Code: ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 c6 06 00 00 4c 8b ab c0 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e9 48 c1 e9 03 <80> 3c 01 00 0f 85 8f 06 00 00 49 8b 6d 00 48 85 ed 0f 84 e4 03 [ 773.599922] RIP: vhost_chr_write_iter+0x873/0x1100 RSP: ffff8880b3687c00 [ 773.609923] ---[ end trace 4cfe89ef6e5d6fbc ]--- [ 773.620245] Kernel panic - not syncing: Fatal exception [ 773.625802] Kernel Offset: disabled [ 773.629436] Rebooting in 86400 seconds..