g program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = syz_io_uring_setup(0x1ab7, &(0x7f00000000c0)={0x0, 0xe1c6, 0x2, 0x1, 0x199, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x2, 0x3ff) r3 = socket$inet6(0xa, 0x2, 0x2) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2, r3, r0, r0, r0, r0], 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x1f, 0x0, 0x5, 0x2, 0x0, 0x9, 0x4801, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x61, 0xffffffffffffffe1, 0x1, 0x8, 0x0, 0x6, 0x5, 0x0, 0x100, 0x0, 0x40}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0xd7a, 0x8, 0x0, 0x251}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000604) 17:31:53 executing program 1: r0 = shmget(0x2, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmget(0x2, 0x1000, 0x78000101, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) syz_io_uring_setup(0x33cf, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r2, 0x0) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000700) 17:31:53 executing program 4: r0 = socket(0x1d, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001100f7c5550a26"], 0x14}}, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) socket(0xf, 0x2, 0x7fffffff) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 5: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x1035, &(0x7f0000000280)={0x0, 0x7b7e, 0x10, 0x1, 0x253}) r2 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0xd7f1, 0x2, 0xfffffffd, 0x4, 0x0, r1}) r3 = syz_io_uring_setup(0x2b2a, &(0x7f00000000c0)={0x0, 0xbd21, 0x0, 0x3, 0x98, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000001c0)=""/66, 0x42}], 0x2) r4 = io_uring_setup(0x34af, &(0x7f0000000440)={0x0, 0x1e0e, 0x1, 0x2, 0x306, 0x0, r2}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x10000000) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x1, 0x141000) r6 = io_uring_setup(0x22a0, &(0x7f0000000680)={0x0, 0xf495, 0x0, 0x3, 0x3d5, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000365c77670d5c66a1f0a934c0845a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088f7ee489f8d586000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcb2bbf29856b79c9945a58b3b3e47685ddd92156065502dadc42a8710188dd4dd0528d38a9ef4f1cfb1af55f3c54ea1d415a8ad52c1e67803cc53f05da3"], 0x21) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x10001, 0xd02, 0x0, 0x4, 0x1, 0xc, "98f7528c5def7ede8d1243bfe012fe1317fc6f27943d94b037259e5e3cab69132548a446cc3a13e52e9160866c6bf397438c6b5ae4660ed4094f958df4a73de3", "7440b79d07eb033014965d094073c06836cf107c741d0899030a7415e28a861b48f7fd24a454bb00e78df16ae80a919a96fd4490ce4b23415e60db0ffdd881c6", "e85d7f45a3a42e5c2ea1801dbbfbc98ccf25b484a0ef7aa6b7d726e55bf32693", [0x400, 0x3]}) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8008004) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) 17:31:53 executing program 5: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x10000}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x7499, &(0x7f0000000040)={0x0, 0x7af8, 0x20, 0x40008000, 0x100042, 0x0, r0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x764a, &(0x7f0000000100)={0x0, 0x901d, 0x1, 0x2, 0xe3, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x10000000) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0xd4f, &(0x7f0000000000)={0x0, 0x4048, 0x10, 0x2, 0x346, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:31:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x25, 0xa, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@gcm_128={{0x19c50e0d8f90e6c0}, "0500000000000040", "7e37580080000070a118c4ff00", "d3446245", "044eabc2bc32e33c"}, 0x28) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x4f, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:53 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmdt(r1) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x8010, r0, 0x0) r3 = io_uring_setup(0x436c, &(0x7f0000000000)={0x0, 0xc7a7, 0x20, 0x1, 0xee, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0xfff, 0x2) ioctl$LOOP_CLR_FD(r4, 0x4c01) 17:31:53 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x4) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x62000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x100010, r0, 0x10000000) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x190c, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="0e1887910241e08ac002fe07d7aff420", 0x10) 17:31:53 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@mcast2}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x52641) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[r2, r3]}, 0x2) r4 = io_uring_setup(0x5a58, &(0x7f00000001c0)={0x0, 0x1af3, 0x2, 0x0, 0x21, 0x0, r0}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="000400"/40], 0x3) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:53 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = io_uring_setup(0x5b87, &(0x7f0000000040)={0x0, 0x9ee7, 0x10, 0x1, 0x7f}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x20010, r2, 0x8000000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000140)) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x10000000) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa0082) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x2, 0x20, 0x1, "cec8bbd409f2d2763a653eeed0c9d5ea2e1a007840b4bddb1793a8b4bff9bcdc56b02485066cf7cb678644b19a43d74b31fdf8e5190ba1c79febc573f746c2c8", "3ae40fb4a9d6306340fc91466b1b2b9e5f90a86c7cdfbb9bc71366877ae5368a0d335761780b231c04be4828e84f4b1e2e54fd40fad151654ea8e58799f08792", "eb33c0da7cecc327dca8c9fe3b0aef82da3cb04920e21d7b00be0fdd67c44650", [0x5dce, 0x3]}) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000080)) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:53 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) socket$inet6_tcp(0xa, 0x1, 0x0) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000200)={0x0, 0x47ffffff, 0x20, 0xfffffffe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:53 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x800) 17:31:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x50, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) shmdt(r0) 17:31:54 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x5, 0x40, 0x4, @private0, @loopback, 0x7800, 0x8, 0xc1c, 0x4}}) 17:31:54 executing program 4: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = syz_io_uring_setup(0x288f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = io_uring_setup(0x4f9e, &(0x7f0000000000)={0x0, 0x453b, 0x10, 0x2, 0x340}) r1 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) 17:31:54 executing program 1: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:54 executing program 5: io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmdt(r0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket(0x0, 0x1, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = pidfd_open(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000000)=[r2, r3, r4, 0xffffffffffffffff, r5, r0]}, 0x6) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:31:54 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180)}], 0x3) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:31:54 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x98463a6ad6ddeab4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x30, @tick=0x8, 0x40, {0x9, 0xba}, 0x6, 0x1, 0x5}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[r2]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x40012, r0, 0x8000000) 17:31:54 executing program 3: r0 = syz_io_uring_setup(0x14f6, &(0x7f0000000140)={0x0, 0x8052, 0x20, 0x0, 0x3a9}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000f50200d0f7ea02a988afdc7a87705a0d48a068197a0b58ad48b9aa89f627ac5648697eea66655fd040cef0dd55ecc440e3e33d90c7e95e05446e13cc2c872221ebfcd4a477b17aea19f55349903bc80da4182573fc37c63408fe020b938611c5685440b3a321a0b92da786da08b9abf5260e"], 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000015, 0x100010, r0, 0x8000000) 17:31:54 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0x2e88, 0x0, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:54 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x3, 0x80, 0x1, {0x4e7, 0x7f}, 0x7cd4c060, 0x9c}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x35a, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0xee, 0x4}, 'port1\x00', 0x1, 0x100004, 0x401, 0x1f, 0x5, 0x5, 0x7ff, 0x0, 0x1, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)={0x40, {{0xa, 0x4e20, 0x81, @mcast2, 0x200}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}}, {{0xa, 0x4e23, 0xb0, @mcast2, 0xfe0000}}, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}]}, 0x210) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x2, @remote, 0x10000}}, 0x0, 0x0, 0x40, 0x0, "f1c255b8cba48c8b458276a2cd631cd0bffb0fafa22b3fbf8cfaefe7c6d4d9e6207af25b0450e86ff8f5ed8cbf1e9fb7acefe4f83db8cec69cf565ff8cd7ca36dfcf104b91a6eedd5aebc8f8766eba17"}, 0xd8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x2, 0x6, 0x20, @private0, @local, 0x1, 0x0, 0xffffef2d, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x7800, 0x1, 0x6, 0x2, {{0x39, 0x4, 0x1, 0x39, 0xe4, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, {[@lsrr={0x83, 0x1b, 0xf8, [@empty, @rand_addr=0x64010100, @empty, @remote, @broadcast, @loopback]}, @noop, @lsrr={0x83, 0x13, 0x74, [@broadcast, @empty, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x54, 0xae, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x81}, {@multicast1, 0xffffffff}, {@local}, {@multicast2, 0x401}, {@empty, 0x800}, {@broadcast, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x8000}, {@loopback, 0xfffffffc}, {@multicast1, 0x800}]}, @generic={0x86, 0x2}, @ssrr={0x89, 0x1b, 0x19, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x83, [@local]}, @lsrr={0x83, 0x1b, 0x2d, [@dev={0xac, 0x14, 0x14, 0x30}, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}]}]}}}}}) r2 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x10000000) 17:31:54 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x189000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x0, 0x3, {{0x1a, 0x4, 0x1, 0x5, 0x68, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0x13, 0xe1, [@remote, @multicast2, @rand_addr=0x64010100, @multicast1]}, @noop, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x8, "2d2eed82ea41"}, {0x5, 0x9, "e6befc85ff1f6c"}, {0x1, 0x3, "95"}, {0x5, 0xe, "4220a3dfeded5cd34ef95e5c"}, {0x0, 0xc, "08b660deedda6c560ad9"}, {0x6, 0xa, "b4eec302bf2f0ba5"}]}]}}}}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/51, 0x33}, {0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x3) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3a6f, 0x7c75, 0x2, &(0x7f0000000180)={[0x20]}, 0x8) 17:31:54 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x137d, &(0x7f0000000180)={0x0, 0x929d, 0x2, 0x2, 0x378, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xc, 0x4010, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/236, 0xec}], 0x1) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:54 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmat(0x0, &(0x7f0000ff8000/0x8000)=nil, 0x2000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x30, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000440)={0x3}) 17:31:54 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f5, 0x61}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xfff, @mcast2, 0x6cf12a28}, 0x1c) 17:31:54 executing program 3: r0 = io_uring_setup(0x1a4e, &(0x7f0000000000)={0x0, 0x490c, 0x10, 0x1, 0x112}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) 17:31:54 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) 17:31:54 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x3570, &(0x7f0000000340)={0x0, 0x6252, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000040)) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000080)) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:54 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000140)=""/2, 0x2}], 0x3) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000800008000"/208], 0x18) 17:31:54 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x0, 0xfffffffc}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="677265748d6100004000000000", @ANYRES32=0x0, @ANYBLOB="0020001000000002800000004e0f00780067000002299078ac1414aa640101028923387f0000017f000001ac1414aaac14141dac14144300000000ac1e0101ac1e000101863f00000002050cde579c450f1322a9d44c0411673d0227355a0c3360a9f25f03fff1070a65d696e8ec3e83c3020e4d2947ef97ffc8ec485afc5905049b9800ec405337f2c99acad8f7371ff11dd66f33727c0435e0cf1445a6b75bd9d2d508383816d18e221df72228f78726fe878cd6587108019d49540ea58d79621130bf6a8b"]}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x8, 0x1, {0x0, 0x3, 0x1000, 0x1, 0x8}, 0x2a5}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 17:31:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250500000006000b000f0000000800020002000000080008007f080004000300000008000400030000003dcf05d67fff0b68cb1ce2b46241f317fe29ab483ae97c034a168d772b283ce238524f048dba1480028b237cc208432fb67346d0081a97151cabee4e1e1464bdf1e561d5f1b1825aa6a66031e0d025e9046df5aabb1f1015b2"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c898) 17:31:54 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0xfc, 0x8}, {}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0xff, 0x9}, 'port1\x00', 0x0, 0x1, 0x5, 0x3, 0xfffffff9, 0x8000, 0x7, 0x0, 0x2, 0x81}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x20}, 0x1c) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r2, 0x8000000) 17:31:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 17:31:54 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:54 executing program 4: r0 = syz_io_uring_setup(0x2071af, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x382}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x6dfd, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x295}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/22, 0x16}, {0x0}, {&(0x7f0000000040)}, {&(0x7f0000000280)=""/170, 0xaa}], 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000000)={0x0, 0x3, 0x74}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = io_uring_setup(0x3692, &(0x7f0000000000)={0x0, 0xbc8c, 0x1, 0x0, 0x16c}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000002, 0x50, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket(0x1f, 0x4215f8afed08962d, 0x401) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x7ff, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20402, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) 17:31:55 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000000c0)={0x5, 0x71acde52, 0x2, {0x1ff, 0x80}, 0x20, 0x3ff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:31:55 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x8, 0x9, 0x48, 0x0, @private1, @local, 0x7, 0x8, 0x6, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="7800f1ae0000da2d00000d5f4b4b006c00660000202f9078ac1414bbac14140b071395c100000264010102e0000002ac1414bb820822ce8d63b613831f7d7f000001ac1e0001ac1414aa64010100e0000001ffffffffac1e01010001831b78e0000002000000007f000001e0000002000000007f00000100"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf250100000005002e000100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) 17:31:55 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x2eea}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x5b55, &(0x7f0000000280)={0x0, 0x28da, 0x8, 0x1, 0x24f, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000300)) io_uring_setup(0x3e0f, &(0x7f0000000180)={0x0, 0x7fe9, 0x4, 0x1, 0x38b, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000200)={0x10000, 0x2, {0x3, 0x2, 0x4, 0x2, 0x1}, 0x3ff}) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000100)={'\x00', 0x6, 0x2, 0x6}) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40001) r3 = syz_io_uring_setup(0x71ab, &(0x7f0000000340)={0x0, 0xaa38, 0x10, 0x1, 0xdc, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:55 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) syz_io_uring_setup(0x2092, &(0x7f00000000c0)={0x0, 0xf3cb, 0x2, 0x2, 0x37d, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:31:55 executing program 1: shmget(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000140)=""/130, &(0x7f0000000000)=0x82) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x3, 0x0, 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r2 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shmdt(r0) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) 17:31:55 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r2 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shmdt(r0) 17:31:55 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x0, 0x0, "37aface19a58ddec5a4216a379655a2643835ee5376c365e51a8be1db59a7c3fa5a4cdb4d89ad805f6898eba4e4017ab90e2e10daf141c31c97fb5479f5484e878efa70dd8e66525dff9693b91755ebd"}, 0xd8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) read$ptp(r1, &(0x7f0000000040)=""/95, 0x5f) 17:31:55 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/33, 0xb}, {0x0, 0xfffffffffffffd9b}, {&(0x7f0000000000), 0x3}], 0x36) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0x1, 0x7}, 'port1\x00', 0x80, 0x4, 0x3, 0x8080000, 0x0, 0xfc79, 0x2, 0x0, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x1, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000440)={0xffff, 0x0, 0x1, 'queue0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000200)={{0x5, 0x9}, 'port0\x00', 0x15, 0x100008, 0x3, 0x4, 0xa3, 0x8, 0x4, 0x0, 0x1, 0x7}) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000845}, 0x40000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, 0x15, 0x20, 0x70bd2c, 0x25dfdbfe, {0x1e, 0xd0}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "1873b47998f12e0840925cca16143ead6cfdfc98fa6d"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "c578b25bf759a7fbf6fd22678ec3b9df5ae103cb00fee81ab0b92fb936263af21d54f22138a46d21507032e5d971aca452cd06ac64f216b7bc79499716be8a7a9a537ef5b4249cf268c29b23a42bd04471c75fa6fba1247096d26b70e5b4a2872f974e91675ef752b4752c2d27a8ef321ed0466746588847b0c8f0763684637d99719bd54c11e5f3ee6e5154676993cce59fde3534b2b811b455c4a1b3990fcb405280e6fa3f132e4e055797f4b6d7e8cf8e1b0c3fcfda94d58dd9d4b63f81a9b8"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "1a169769d0c9"}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xbc6b, 0x0, 0x0, 0x57}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r2, 0x10000000) 17:31:55 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r2 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shmdt(r0) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x1ee1aa8, 0x10000, 0x1, 'queue1\x00', 0x8000}) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x5, 0x6, &(0x7f0000000000)) 17:31:55 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x140030, 0xffffffffffffffff, 0x8000000) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x0, 0x333}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:55 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7ee, 0x0, 0x0, 0x242}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:55 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r2 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) shmdt(r0) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x6, &(0x7f0000000000)) 17:31:55 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x11, 0x13, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) syz_io_uring_setup(0x4d04, &(0x7f0000000000)={0x0, 0x5a95, 0x0, 0x2, 0xe3, 0x0, r1}, &(0x7f000046e000/0x4000)=nil, &(0x7f00004e6000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 17:31:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0xa5f, 0xddaa, 0x1, 'queue0\x00', 0x5}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x42001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000180)={0x7fffffff, 0x8, 0x0, 'queue0\x00', 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x20010, r0, 0x406cfcc7) 17:31:55 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r1 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) r1 = socket$inet6(0xa, 0x4, 0x8001) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x101, 0x4) 17:31:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20040) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x3, 0x7}, {0xfa, 0x1}, 0x2010020, 0x6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x140030, 0xffffffffffffffff, 0x8000000) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) shmget(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x10, 0xffffffffffffffff, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000e3e24920461a8c316a1506cab9528aa79d41498d01d1b6fcd7a50d03ff0a0734084b76082fe713cb2b36f3204bfee3da26a245488d7320841c0fbfa11cc2c063a8cb83424de13458b3c5f5eee7b5da853eee6d156f22135a66adfeca91fc40354495a8c7d885234376ea6e69019cc66e4ea8144154887fb4a16f83a14aa0cf22e50f59c67c1966c9b1790657335f61650e83fc2c6326ba0d1a630e9a9382323129fbc9a909ac2f6a8875edf1cac23800a97daa93fadf5187750f85d8e52d8d9dedd3b4000aab60b5214285f5f2ee4c1cbfc5c960a074bdb2d85fba4dddde2c7e46d5c00596cc87e5dc451cbaba", @ANYRES16=r1, @ANYBLOB="00082abd7000ecdbdf250600000008000400ac14143308000400ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x8000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x80010, r3, 0x0) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:55 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) syz_io_uring_setup(0x10071af, &(0x7f0000000340)={0x0, 0x0, 0x10, 0xfffffffe, 0x200}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/152, 0x98}], 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000001c0)=0x2, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x10000) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x4000010, r1, 0x0) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:55 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x5c9a82, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x310}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000000c0)=r0, 0x1) 17:31:55 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7000007, 0x1010, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x11) 17:31:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x21}) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) syz_io_uring_setup(0x2a19, 0xfffffffffffffffd, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000140)) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0xff, 0x40, 0x1, 0x1, 0x0, 0x2, 0x5b094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x600, 0x6, 0x9, 0x0, 0x7, 0x3, 0x3, 0x0, 0x7, 0x0, 0x7692950d}, 0xffffffffffffffff, 0x1000000000009, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "b2ecb914fb1255b4", "35f9fe82f80707531112df52a4b9559f", "833a77bb", "6fc3922cae9bfbd9"}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000001, 0x13, r1, 0x0) 17:31:55 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) socket$inet6(0xa, 0x4, 0x8001) 17:31:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0xa23, &(0x7f0000000240)={0x0, 0xce95, 0x4, 0x3, 0x18d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r1 = syz_io_uring_setup(0x51b9, &(0x7f0000000000)={0x0, 0x6b4b, 0x4, 0x0, 0x2f0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = socket(0x25, 0x1, 0x53b) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000440), 0x4) r3 = io_uring_setup(0x606b, &(0x7f00000001c0)={0x0, 0xa55c, 0x10, 0x1, 0x3ce, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r3, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000100)) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4042, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r5 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_enter(r5, 0x32a4, 0x16ac, 0x2, &(0x7f0000000480)={[0x2]}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x20010, r4, 0x8000000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000780)={0x80000000, {{0xa, 0x4e24, 0x1, @mcast2, 0x5}}}, 0x88) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x164, 0x12, 0x100, 0x70bd2d, 0x25dfdbff, {0x22, 0x3f, 0x7, 0x40, {0x4e20, 0x4e20, [0x1, 0x735, 0x9, 0xeb], [0x5, 0x5, 0x1ff, 0x1fc], 0x0, [0x2, 0x401]}, 0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "a17c8e43d0f2804b15007ce8c8425b5a438aef53131600db076deff9b9d3a98b31baaf451f9fbd2aeb9f4d1e4eace4e3f5ade1f62f9d86257224"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "f46af98bb817b5f2ec2931fdaea6b8418f4542ca407a8ed72f8c8d150fd5f2ab0891bbe165693e75d354b92cf6f503a278fe508d275ce2295fa047b7f32890a8323ce7288e6666859f0f52a45f2d35679b9eeca8f0719cfa8110716e7968a48bc89fbc3ec12e4f5236"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "9ec0989ae3b92da93e997493ffca1dd0ea0dba5503e6948731d322b18a3161812f775e150c40942bd7bf0efc9dd1df9672c2e9c634a33f6f591d00f27e230fb71e268790c85790e76f5819b5246770a7d922adc625d18f8621ab66ef626e1acdad"}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x48001) 17:31:56 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_setup(0x79e2, &(0x7f00000000c0)={0x0, 0x504c, 0x8, 0x2, 0x1d6, 0x0, r1}) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000040)={'\x00', 0x4, 0x3, 0x7}) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x30, r0, 0x10000000) r1 = syz_io_uring_setup(0x2be1, &(0x7f0000000000)={0x0, 0x5429, 0x4, 0x3, 0xc2, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 17:31:56 executing program 3: sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = socket(0x15, 0x4, 0x6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x14, 0x0, 0x70bd2a, 0x25dfdbfd, {0xf260a437d13c83b5, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "363ea91479e998f10efca4604676ae45857000b603af83633c141e9c1b0c76b728d16ca62ef93547ebd7d556e622e7fa7ef45642f480bfb2775984adf631cbc9b5a30e05e83d51fc83009dd5b458aac7392ac124cb606f6059b9948400029ddb1c20c6912de3b938a08be34a6bcd8cc7c413a0d2c95bba9c2e8a3be6fece69035580952ca3012d11775fd78b2dfa06872316cd31df23285307f9e6df736d2d101af342be763aff8946898bac38cf116cb2dd150803314b3876eb696795cdd4aa31bb5fa7799bc8ff31dbc14671f70de0b2d82fbd06"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008000}, 0x8080) 17:31:56 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@empty}, &(0x7f00000001c0)=0x14) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = io_uring_setup(0x6e2a, &(0x7f0000000200)={0x0, 0xc344, 0x20, 0x2, 0x229, 0x0, r0}) r3 = syz_io_uring_setup(0x71ac, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r4 = io_uring_setup(0x1e19, &(0x7f0000000440)={0x0, 0x14af, 0x10, 0x2, 0x1c4, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/145, 0x91}], 0x2) r5 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) io_uring_setup(0x76d0, &(0x7f00000002c0)={0x0, 0xbadb, 0x1, 0x1, 0x6e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x412000, 0x0) 17:31:56 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x1ff, 0x2, {0x1, 0x1, 0x3, 0x0, 0xff}, 0x1871472d}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0xd4, 0x3, 0x7}) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x9, 0x7fff, 0x8}) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r0, 0x1) 17:31:56 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x8000000) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ae, &(0x7f0000000100)={0x0, 0x85b3, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) 17:31:56 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = io_uring_setup(0x52fe, &(0x7f00000000c0)={0x0, 0xfb93, 0xc, 0x0, 0x16c, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x4000010, r1, 0x10000000) 17:31:56 executing program 1: r0 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff7000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) syz_io_uring_setup(0x4291, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_io_uring_setup(0x41ed, &(0x7f0000000080)={0x0, 0x8eea, 0x20, 0x0, 0x3b4, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 17:31:56 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 17:31:56 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:31:56 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 5: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x26, &(0x7f00000000c0)={0x0, 0x4dfd, 0x8, 0x0, 0x3a, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x110, r1, 0x8000000) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) 17:31:56 executing program 3: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x98a, {{0xa, 0x4e24, 0x7, @local, 0xa81}}}, 0x88) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x4010, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x2, 0x6, 0x4, 0x0, 0x1, 0x4c00, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_config_ext={0x3ff, 0x2}, 0x40408, 0x5, 0x6, 0x0, 0xcc2, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1000}, r0, 0x10, r0, 0xf) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x7f, 0x7, 0x3, 0x0, 0x0, 0x6, 0x10808, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2a7d, 0x0, @perf_config_ext={0x1ff, 0x3}, 0x1022, 0x6, 0x7fffffff, 0x5, 0x7, 0x3, 0x3, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r3, 0x9) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:56 executing program 0: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, r0, 0x8000000) 17:31:56 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x38, 0x1, 0x8c, 0x9, 0x5, 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 17:31:56 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x5b77, &(0x7f0000000040)={0x0, 0xf244, 0x2, 0x2, 0x29b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x5, 0x6, &(0x7f0000000000)) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x4fbc, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:56 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x140030, 0xffffffffffffffff, 0x8000000) 17:31:56 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x4000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6, &(0x7f0000000000)) 17:31:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x10071af, &(0x7f0000000340)={0x0, 0xd66a, 0x0, 0x3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2e5}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmget(0x3, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x7590, &(0x7f0000000000)={0x0, 0x7738, 0x4, 0x0, 0x302, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 17:31:56 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xd19, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:31:56 executing program 4: r0 = io_uring_setup(0x5e8b, &(0x7f0000000080)={0x0, 0x87cf, 0x10, 0x1, 0x2a9}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:56 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = syz_io_uring_setup(0x56f3, &(0x7f00000000c0)={0x0, 0x4366, 0x0, 0x1, 0x304}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) io_uring_setup(0x62e5, &(0x7f0000000180)={0x0, 0x33f6, 0x2, 0x0, 0x112, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:56 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x3, 0x80000}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x200, 0x0, &(0x7f0000000080)=[r0, 0xffffffffffffffff, r2, r3]}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x3, 0x8, 0x0, 0x7ff, 0x4, 0x3f}) 17:31:56 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:56 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x13, 0xffffffffffffffff, 0x5) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 17:31:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) io_uring_enter(r0, 0x2067, 0x274f, 0x1, &(0x7f0000000080)={[0x6]}, 0xffffffffffffff84) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x4, 0x20, 0x81, 0x1000, 0x60, @remote, @private1, 0x700, 0x10, 0x586, 0xdf06}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = io_uring_setup(0x510e, &(0x7f00000002c0)={0x0, 0xf7d6, 0x8, 0x0, 0x1ac, 0x0, r0}) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x4, 0xa2, 0x1, 0x7, 0xc, @mcast1, @local, 0x8016, 0x40, 0xb22, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r5, 0x4, 0x16, 0x1, 0x6, 0xe, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x1, 0x200, 0x10001}}) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xe93e7f06e4ca19f3, &(0x7f00000000c0)=0xffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x9, 0x8001, 0x47, 0x100}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 17:31:57 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0xb9053, r0, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = socket(0x6, 0x800, 0x200) pidfd_open(0x0, 0x0) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f0000000680)=""/138, 0x8a}], 0x5) r3 = eventfd2(0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="00006a84000000000000000000", @ANYRES32=0x0, @ANYBLOB="00100040000000080000000249fa00a400670000040090787f000001ac1e000183275bac1414190a01010064010100ac1e0001ffffffffac1414bbac1414bbe00000027f000001441cb651e000000100000004ac141429ffffffffac1414bb000000060707bde00000018632000000010212545c5a158a710185cfa30c933e1616ab0507450ef91a19010d1a466e48574bccfcca4c650706f17b3d2a830bf10a010102ac1e01010707e00a0101020000"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="73797a746e6c32000000050000000000", @ANYRES32=r4, @ANYBLOB="00400000000000057fffffff4ba1002c00640000202f9078ac1414bb7f00000144083af00000000094040100830b9dac1414bbe00000010127f06a08983dc10f8eb81b2b1c17289fa8924c0d43a43d48de91a5d654a02aa78893ce5fdc4842ef51d32b589fc720cb9330f924004442965fd3e8968b5853a6d98fc743133f2fc77fe6971401f9d362bbca76c97f2ff2abb78cc88a1c93dd1031cc96c18140d6927082b392b2438aaafc1d0747ef8af9980d2f05d417013e04552c07e4497033ec"]}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 17:31:57 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xbdb6}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 17:31:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10080080}, 0x24000000) r2 = socket(0x10, 0x2, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)={0x14}, 0x14}, 0x300}, 0x0) socket(0x6, 0x2, 0x8) r3 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(r3) syz_io_uring_setup(0x71af, &(0x7f0000000080)={0x0, 0x132e, 0x10, 0x1, 0x2c1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:57 executing program 2: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:57 executing program 5: r0 = io_uring_setup(0x50bf, &(0x7f0000000040)={0x0, 0xd7ef, 0x4}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x41, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7}}}, 0x88) r5 = syz_io_uring_setup(0x18b4, &(0x7f00000000c0)={0x0, 0xea1a, 0x10, 0x3, 0x30a, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r7 = eventfd2(0x100, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x7, 0x0, &(0x7f0000000000)=[r6, r7]}, 0x2) 17:31:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00e100cbddfe7d418c54366be25e7fcc593e267f3beecb1b8773648a212266413857ba31e35a5d988d279c0a58c4cba09a7277a476d64b4bb3507265976f98a1029e6e7604f301cf4eb6a030f95c5e3946733cccee601f135332686c3647dd", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf2503000000080001000000000008000200020000000800010001000000080001000300000008000100000000000800010001000000080002000200000008000200020000000800020002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{0x1f, 0x4}, {0x0, 0x1}, 0x8000, 0x7, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x3, 0x8, 0x1, 'queue1\x00', 0x99}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000140)={0x7ff, 0x1, 'client0\x00', 0xffffffff80000002, "4d53dc8e139e83ce", "5dcae0093222e9b1fbfc334f3dc4ff0678e8a847273d714f275882303496090d", 0x4, 0x8}) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x400) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000280)={0x4, 0x5f58, 0x7ff, 0xff, 0x6, 0xfffffff7}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000440)={{0x7, 0x7}, {0x80, 0x8}, 0x1f, 0x1}) 17:31:57 executing program 2: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:57 executing program 3: sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x78, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffe01}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000c001}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) 17:31:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x21}) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) syz_io_uring_setup(0x2a19, 0xfffffffffffffffd, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000140)) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0xff, 0x40, 0x1, 0x1, 0x0, 0x2, 0x5b094, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x600, 0x6, 0x9, 0x0, 0x7, 0x3, 0x3, 0x0, 0x7, 0x0, 0x7692950d}, 0xffffffffffffffff, 0x1000000000009, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "b2ecb914fb1255b4", "35f9fe82f80707531112df52a4b9559f", "833a77bb", "6fc3922cae9bfbd9"}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000001, 0x13, r1, 0x0) 17:31:57 executing program 1: socket$inet6(0xa, 0x6, 0xffffff22) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x152, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000400)) 17:31:57 executing program 5: r0 = io_uring_setup(0x3911, &(0x7f0000000040)={0x0, 0xd7f1, 0x20, 0x0, 0xfffffffe}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:57 executing program 2: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 17:31:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 1) 17:31:57 executing program 5: r0 = io_uring_setup(0x44d9, &(0x7f00000000c0)={0x0, 0xd7f3, 0x0, 0x0, 0x196}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3013.944073][T25725] FAULT_INJECTION: forcing a failure. [ 3013.944073][T25725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3013.957346][T25725] CPU: 0 PID: 25725 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3013.966110][T25725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3013.976161][T25725] Call Trace: [ 3013.979430][T25725] dump_stack_lvl+0xd6/0x122 [ 3013.984015][T25725] dump_stack+0x11/0x1b [ 3013.988219][T25725] should_fail+0x23c/0x250 17:31:57 executing program 3: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x140030, 0xffffffffffffffff, 0x8000000) [ 3013.992630][T25725] __alloc_pages+0x102/0x320 [ 3013.997218][T25725] alloc_pages+0x382/0x3d0 [ 3014.001679][T25725] __pmd_alloc+0x47/0x340 [ 3014.006063][T25725] handle_mm_fault+0x1224/0x1580 [ 3014.010998][T25725] do_user_addr_fault+0x609/0xbe0 [ 3014.016052][T25725] exc_page_fault+0x91/0x220 [ 3014.020708][T25725] asm_exc_page_fault+0x1e/0x30 [ 3014.025613][T25725] RIP: 0010:__put_user_nocheck_4+0x3/0x11 17:31:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000080)=""/51, 0x33, 0x80000002, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0x9, @private1, 0x8001}, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x4, [0x3ff, 0x80000001, 0xfffffff7, 0x40000000, 0x1c85, 0x6, 0xd4, 0x2]}, 0x5c) 17:31:57 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) 17:31:57 executing program 3: r0 = syz_io_uring_setup(0x56bf, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x4106014, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x12296d) 17:31:57 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x28b7, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) [ 3014.031386][T25725] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3014.050996][T25725] RSP: 0018:ffffc9000a50fe80 EFLAGS: 00050297 [ 3014.057059][T25725] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 3014.065023][T25725] RDX: ffff8881172a8040 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3014.072988][T25725] RBP: 0000000000000000 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3014.080961][T25725] R10: 00018881b0476d07 R11: 0000000000000000 R12: 0000000000000000 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3014.088934][T25725] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 3014.096975][T25725] ? __sys_socketpair+0xa8/0x810 [ 3014.101934][T25725] __sys_socketpair+0xc4/0x810 [ 3014.106702][T25725] __x64_sys_socketpair+0x4e/0x60 [ 3014.111734][T25725] do_syscall_64+0x44/0xa0 [ 3014.116162][T25725] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3014.122071][T25725] RIP: 0033:0x7f41d6abb709 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3014.126513][T25725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.146116][T25725] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3014.154533][T25725] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3014.162504][T25725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3014.170471][T25725] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.178514][T25725] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.186478][T25725] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:31:57 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = io_uring_setup(0x2f7, &(0x7f0000000140)={0x0, 0xb6b9, 0x0, 0x1, 0x17b}) syz_io_uring_setup(0x46416, &(0x7f0000000040)={0x0, 0x87b0, 0x2, 0x1, 0x384, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 2) 17:31:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x72b080, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 17:31:57 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000180)={0x0, 0x5b1a, 0x583290436604d479, 0x1, 0x2ed}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000200)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/145, 0x91}) 17:31:57 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000100)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x200, 0x6, 0x9597, 0x319, 0x2}, 0x14) socketpair(0xa, 0x1, 0xf3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x7fffffff, 0x4) io_uring_enter(0xffffffffffffffff, 0x14e1, 0x408, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) 17:31:57 executing program 2: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3014.330700][T25756] FAULT_INJECTION: forcing a failure. [ 3014.330700][T25756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3014.344018][T25756] CPU: 0 PID: 25756 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3014.352978][T25756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3014.363030][T25756] Call Trace: [ 3014.366304][T25756] dump_stack_lvl+0xd6/0x122 [ 3014.370917][T25756] dump_stack+0x11/0x1b [ 3014.375122][T25756] should_fail+0x23c/0x250 [ 3014.379544][T25756] __alloc_pages+0x102/0x320 [ 3014.384135][T25756] alloc_pages+0x382/0x3d0 [ 3014.388554][T25756] pte_alloc_one+0x29/0xb0 [ 3014.392961][T25756] __pte_alloc+0x2f/0x220 [ 3014.397284][T25756] do_anonymous_page+0x7a9/0x8b0 [ 3014.402267][T25756] ? __pmd_alloc+0x301/0x340 [ 3014.406847][T25756] handle_mm_fault+0x7f5/0x1580 [ 3014.411694][T25756] do_user_addr_fault+0x609/0xbe0 [ 3014.416712][T25756] exc_page_fault+0x91/0x220 [ 3014.421292][T25756] asm_exc_page_fault+0x1e/0x30 [ 3014.426144][T25756] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3014.431955][T25756] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3014.451569][T25756] RSP: 0018:ffffc9000a61be80 EFLAGS: 00050297 [ 3014.457654][T25756] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 3014.465693][T25756] RDX: ffff88813efc8040 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3014.473667][T25756] RBP: 0000000000000000 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3014.482243][T25756] R10: 00018881b0476d07 R11: 0000000000000000 R12: 0000000000000000 [ 3014.490214][T25756] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 3014.498229][T25756] ? __sys_socketpair+0xa8/0x810 [ 3014.503187][T25756] __sys_socketpair+0xc4/0x810 [ 3014.507962][T25756] __x64_sys_socketpair+0x4e/0x60 [ 3014.513032][T25756] do_syscall_64+0x44/0xa0 [ 3014.517457][T25756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3014.523353][T25756] RIP: 0033:0x7f41d6abb709 [ 3014.527757][T25756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.547363][T25756] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3014.555774][T25756] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3014.563791][T25756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3014.571786][T25756] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 17:31:57 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000040)={0x1300, 0x12, 0x0, 0x70bd29, 0x25dfdbfe, {0x27, 0x55, 0xfc, 0x4f, {0x4e21, 0x4e22, [0x6, 0x800, 0x81, 0x8001], [0x8, 0x7fffffff, 0x20, 0xdd7], 0x0, [0x81, 0x6000]}, 0x101, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x93, 0x1, "c9c8969899a0b2ac8824ea88fd3e3b2d2b8a5fa66613d5ad43e7ab64a74a8b22b8203ce475fd0d7af9d65a8d36b6dfdf86c976ead18b6d1737f709ebc66f48c0353f5596d32ce8fc2aa9bf539840b05fa77348728cc5768723b0610a3f2e0381835f841ef627cda14cd63a586245b74a195cd554d7065075c48d81073bdfedefeca79eff46cac77c6521ebe876108c"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "8ef885d33dbe8bb6f0de4920590cfecd00a38e44a6ddac6415b6e1ef49286392d8e07b8d125f3e2f021061d766d2de0746141f4c0eb4094970102a4feb1015c6f01aae67941f5746a130472d56891bcec3e8320f5f8d573f57e665090ece791b36cde4813d49f7c58159e972b75b24de8317b010c523615c38a2571aab73853f0b2a3959d90bc90816000bdbd232abd7b918b2787779324bbfb2161646799265b9f58231ef850c647cbdcd81a29086bb25d959ed4bee8f2f9d"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "68757823846d2f3227f9c130de52fdb0f925abd75561829184d72beb136719b992c1f6c9597def0975c9f626f4d92f204751103b606d43c7b4fb93c909f1f7225d1acb31bf26c2abaae702cea17d657c37651636596813c696b63652b94133f68cfbb1c04c56070f652f7346dbdf5e6554c3902a8ba08180f51d02dd23583ca8d7e5"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "ea3c7ce1d9dfb93ac335211281cfa518a2cf7d4e77db797a4d0af3ed526282180a5bb2b8f9290188ecc4b763acca23ad7ed2fa8def7074c586a4c21bb2a0df96a3200323d97a19afb927744851586126e1fe07119663ee1bc1909513c6d6fa88dc99e588faabb268c801450c8ae6b88ba9e37b881bfefd1aaccda4650918127ab6cd2cfa7fa24d63231b2200476ef52d716327ecbb3ef964c4cfd3efbe00c529db0ff9e30c504b8eb79f3bef9fb30b25bf55a97cf06ac400acb468483269590937fdbcc9085e88ca4f4617f5da"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1300}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x3fb1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 17:31:58 executing program 1: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x1dd7, 0x8, 0x0, 0x1a7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) shmdt(r0) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3014.579756][T25756] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.587720][T25756] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:31:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 3) 17:31:58 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x1, 0x6}) r1 = io_uring_setup(0x5c8, &(0x7f0000000040)={0x0, 0x5853, 0x0, 0x0, 0x0, 0x0, r0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd5800fedbdf25020000001400b530070000000000000000000000ffffac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6(0xa, 0x80000, 0x200) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000000c0)={0x7, {{0xa, 0x4e20, 0xe9e, @local, 0x7}}}, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000003c0)={0x6, 0x200, 0x0, 0x52, 0x81, 0x4}) r6 = accept4$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x501000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r6) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) 17:31:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/54, 0x36, 0x43, &(0x7f0000000040)={0xa, 0x30, 0x4c, @empty, 0x1}, 0x1c) [ 3014.729829][T25793] FAULT_INJECTION: forcing a failure. [ 3014.729829][T25793] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.742467][T25793] CPU: 0 PID: 25793 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3014.751227][T25793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3014.761319][T25793] Call Trace: [ 3014.764590][T25793] dump_stack_lvl+0xd6/0x122 [ 3014.769241][T25793] dump_stack+0x11/0x1b [ 3014.773396][T25793] should_fail+0x23c/0x250 [ 3014.777844][T25793] ? __anon_vma_prepare+0x41/0x2d0 [ 3014.782954][T25793] __should_failslab+0x81/0x90 [ 3014.787709][T25793] should_failslab+0x5/0x20 [ 3014.792203][T25793] kmem_cache_alloc+0x4f/0x300 [ 3014.796978][T25793] ? pte_alloc_one+0x8c/0xb0 [ 3014.801563][T25793] __anon_vma_prepare+0x41/0x2d0 [ 3014.806516][T25793] do_anonymous_page+0x7ca/0x8b0 [ 3014.811451][T25793] ? __pmd_alloc+0x301/0x340 [ 3014.816080][T25793] handle_mm_fault+0x7f5/0x1580 [ 3014.820985][T25793] do_user_addr_fault+0x609/0xbe0 [ 3014.826004][T25793] exc_page_fault+0x91/0x220 [ 3014.830678][T25793] asm_exc_page_fault+0x1e/0x30 [ 3014.835589][T25793] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3014.841392][T25793] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3014.860998][T25793] RSP: 0018:ffffc9000a6cbe80 EFLAGS: 00050297 [ 3014.867057][T25793] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 3014.875024][T25793] RDX: ffff88811ac35080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3014.882993][T25793] RBP: 0000000000000000 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3014.891018][T25793] R10: 00018881b0476107 R11: 0000000000000000 R12: 0000000000000000 [ 3014.898983][T25793] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 3014.907011][T25793] ? __sys_socketpair+0xa8/0x810 [ 3014.911991][T25793] __sys_socketpair+0xc4/0x810 [ 3014.916800][T25793] __x64_sys_socketpair+0x4e/0x60 [ 3014.921906][T25793] do_syscall_64+0x44/0xa0 [ 3014.926332][T25793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3014.932307][T25793] RIP: 0033:0x7f41d6abb709 [ 3014.936827][T25793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.956449][T25793] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3014.964871][T25793] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3014.973193][T25793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 3: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/212, 0xd4) read$ptp(0xffffffffffffffff, &(0x7f0000000100)=""/183, 0xb7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x5, 0x101, {{0x25, 0x4, 0x3, 0x5, 0x94, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@cipso={0x86, 0x6b, 0xffffffffffffffff, [{0x7, 0x12, "f76e8c6b3ef5deae42495b08fffdc39a"}, {0x1, 0xf, "f6eb493d87246996cae9c18026"}, {0x7, 0x5, "991bc4"}, {0x2, 0x10, "a1631d90806be8f0b17905f64c71"}, {0x7, 0x9, "45bbbd3f753b03"}, {0x2, 0x2}, {0x0, 0x11, "c80faea2a7530291fc6ad98fdfbeab"}, {0x2, 0xe, "1c34cc5a064a5e2c7fbc5c33"}, {0x0, 0x3, "8b"}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x3a, 0x3, 0xc, [{@rand_addr=0x64010100, 0x2d}, {@local, 0xfff}]}]}}}}}) r1 = syz_io_uring_setup(0x104f, &(0x7f00000002c0)={0x0, 0xda5e, 0x0, 0x2, 0x51}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0xd3b, &(0x7f0000000000)={0x0, 0x9022, 0x2, 0x3, 0x226}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x1, 0xffffffff, 0x4000004, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:31:58 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = io_uring_setup(0x1c37, &(0x7f0000000000)={0x0, 0xad3e, 0x20, 0x0, 0x2}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300"/168], 0x13) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) [ 3014.981160][T25793] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.989123][T25793] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3014.997094][T25793] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:31:58 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x110, r0, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:31:58 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) io_uring_setup(0x4c79, &(0x7f00000000c0)={0x0, 0xad5a, 0x10, 0x2, 0x8f}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) 17:31:58 executing program 2: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:31:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 4) 17:31:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x21749) 17:31:58 executing program 1: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000400)) socket$inet6(0xa, 0x800, 0x5) socket$inet6(0xa, 0x2, 0x3) 17:31:58 executing program 2: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3015.148967][T25828] FAULT_INJECTION: forcing a failure. [ 3015.148967][T25828] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.161768][T25828] CPU: 0 PID: 25828 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3015.170530][T25828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3015.180584][T25828] Call Trace: [ 3015.183946][T25828] dump_stack_lvl+0xd6/0x122 [ 3015.188540][T25828] dump_stack+0x11/0x1b [ 3015.192768][T25828] should_fail+0x23c/0x250 17:31:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0xe8) [ 3015.197225][T25828] ? __anon_vma_prepare+0x92/0x2d0 [ 3015.202325][T25828] __should_failslab+0x81/0x90 [ 3015.207147][T25828] should_failslab+0x5/0x20 [ 3015.211765][T25828] kmem_cache_alloc+0x4f/0x300 [ 3015.216606][T25828] ? __anon_vma_prepare+0x41/0x2d0 [ 3015.221718][T25828] __anon_vma_prepare+0x92/0x2d0 [ 3015.226669][T25828] do_anonymous_page+0x7ca/0x8b0 [ 3015.231603][T25828] ? __pmd_alloc+0x301/0x340 [ 3015.236191][T25828] handle_mm_fault+0x7f5/0x1580 [ 3015.241036][T25828] do_user_addr_fault+0x609/0xbe0 17:31:58 executing program 2: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3015.246061][T25828] exc_page_fault+0x91/0x220 [ 3015.250649][T25828] asm_exc_page_fault+0x1e/0x30 [ 3015.255503][T25828] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3015.261224][T25828] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3015.280892][T25828] RSP: 0018:ffffc9000a6cbe80 EFLAGS: 00050297 [ 3015.286953][T25828] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 17:31:58 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x20010, 0xffffffffffffffff, 0x8000000) 17:31:58 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) [ 3015.294985][T25828] RDX: ffff88811ac35080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3015.302952][T25828] RBP: 0000000000000000 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3015.311060][T25828] R10: 00018881b0476a87 R11: 0000000000000000 R12: 0000000000000000 [ 3015.319026][T25828] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 3015.326994][T25828] ? __sys_socketpair+0xa8/0x810 [ 3015.331936][T25828] __sys_socketpair+0xc4/0x810 [ 3015.336751][T25828] __x64_sys_socketpair+0x4e/0x60 [ 3015.341773][T25828] do_syscall_64+0x44/0xa0 17:31:58 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x8000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x11, r1, 0x0) [ 3015.346197][T25828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3015.352169][T25828] RIP: 0033:0x7f41d6abb709 [ 3015.356580][T25828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.376188][T25828] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3015.384671][T25828] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3015.392648][T25828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3015.400616][T25828] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.408583][T25828] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3015.416554][T25828] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:31:59 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x7275}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000080), 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@private0}, &(0x7f0000000100)=0x14) 17:31:59 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x1d21, &(0x7f00000000c0)={0x0, 0x4268, 0x4, 0x1, 0x2bd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x549a, &(0x7f0000000180)={0x0, 0xda36, 0x20, 0x3, 0x3aa, 0x0, r0}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = io_uring_setup(0x53a8, &(0x7f0000000440)={0x0, 0x198a, 0xe6eba8e2d9116a38, 0x3, 0x33, 0x0, r1}) r3 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x0, 0x3ffffffd, 0x0, r2}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x10000000) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r5 = io_uring_setup(0x26fb, &(0x7f0000000280)={0x0, 0xdac7, 0x20, 0x6, 0x3b6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x6, 0x8010, r5, 0x8000000) 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 17:31:59 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x7ec9, &(0x7f0000000340)={0x0, 0x8039, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) 17:31:59 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x41010, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4082, 0x0) syz_io_uring_setup(0x7fe3, &(0x7f0000000040)={0x0, 0xd53b, 0x2, 0x0, 0xd3, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:31:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 5) 17:31:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) [ 3015.602730][T25873] FAULT_INJECTION: forcing a failure. [ 3015.602730][T25873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3015.616040][T25873] CPU: 1 PID: 25873 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3015.624878][T25873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3015.634928][T25873] Call Trace: [ 3015.638204][T25873] dump_stack_lvl+0xd6/0x122 [ 3015.642894][T25873] dump_stack+0x11/0x1b [ 3015.647117][T25873] should_fail+0x23c/0x250 [ 3015.651545][T25873] __alloc_pages+0x102/0x320 [ 3015.656267][T25873] alloc_pages_vma+0x5ee/0x770 [ 3015.661039][T25873] do_anonymous_page+0x16e/0x8b0 [ 3015.665998][T25873] ? __pmd_alloc+0x301/0x340 [ 3015.670577][T25873] handle_mm_fault+0x7f5/0x1580 [ 3015.675427][T25873] do_user_addr_fault+0x609/0xbe0 [ 3015.680446][T25873] exc_page_fault+0x91/0x220 [ 3015.685029][T25873] asm_exc_page_fault+0x1e/0x30 [ 3015.689941][T25873] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3015.695727][T25873] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3015.715336][T25873] RSP: 0018:ffffc9000d2f7e80 EFLAGS: 00050297 [ 3015.721398][T25873] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 3015.729369][T25873] RDX: ffff88817fd5d080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3015.737356][T25873] RBP: 0000000000000000 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3015.745404][T25873] R10: 00018881b0476a87 R11: 0000000000000000 R12: 0000000000000000 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 17:31:59 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) read$ptp(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x2, 0x2, 0x0, 0x6, 0x6, 0x69}, 0x20) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:59 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x1ad5, &(0x7f0000000000)={0x0, 0x8c5c, 0x0, 0x2, 0x72, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000020000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000997ab398f374546a80d8a89abf6f4ef717ed6b360645b96f1bbdf0e243f075a4ea3d5de3fb8d63dbec4f00"/162], 0xd) [ 3015.753391][T25873] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 3015.761817][T25873] ? __sys_socketpair+0xa8/0x810 [ 3015.766766][T25873] __sys_socketpair+0xc4/0x810 [ 3015.771593][T25873] __x64_sys_socketpair+0x4e/0x60 [ 3015.776672][T25873] do_syscall_64+0x44/0xa0 [ 3015.781174][T25873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3015.787072][T25873] RIP: 0033:0x7f41d6abb709 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}], 0x4) 17:31:59 executing program 4: r0 = fork() waitid(0x2, r0, &(0x7f0000000180), 0x2, &(0x7f0000000200)) wait4(r0, 0x0, 0x2, 0x0) pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x1aa8, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x214}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xf8, 0x86, 0x0, 0x6, 0x0, 0x7, 0x400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x3, @perf_config_ext={0xfff, 0x1f}, 0x1, 0xfffffffffffffff9, 0x8, 0x4, 0x272, 0x9, 0x0, 0x0, 0x10000, 0x0, 0xffff}, 0x0, 0xe, r2, 0x1) [ 3015.791485][T25873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3015.811083][T25873] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3015.819571][T25873] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3015.827594][T25873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3015.835597][T25873] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3015.843561][T25873] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 17:31:59 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, 0xffffffffffffffff, 0x8000000) 17:31:59 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0xffffffff, 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000000c0)={0x5, 0x2, 'client1\x00', 0x4, "c5e758b5fd5e4224", "10bbde25496688cd3fab1499c12cb45ba7b7b2597427ca28b270704deab43de8"}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) eventfd2(0x9, 0x0) [ 3015.851606][T25873] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}], 0x4) 17:31:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 6) 17:31:59 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 3015.986826][T25912] FAULT_INJECTION: forcing a failure. [ 3015.986826][T25912] name failslab, interval 1, probability 0, space 0, times 0 [ 3015.999462][T25912] CPU: 0 PID: 25912 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3016.008232][T25912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3016.018278][T25912] Call Trace: [ 3016.021546][T25912] dump_stack_lvl+0xd6/0x122 [ 3016.026135][T25912] dump_stack+0x11/0x1b [ 3016.030287][T25912] should_fail+0x23c/0x250 [ 3016.034696][T25912] ? sock_alloc_inode+0x23/0x90 [ 3016.039601][T25912] __should_failslab+0x81/0x90 [ 3016.044450][T25912] ? sockfs_init_fs_context+0x70/0x70 [ 3016.049821][T25912] should_failslab+0x5/0x20 [ 3016.054319][T25912] kmem_cache_alloc+0x4f/0x300 [ 3016.059143][T25912] ? sockfs_init_fs_context+0x70/0x70 [ 3016.064565][T25912] sock_alloc_inode+0x23/0x90 [ 3016.069297][T25912] ? sockfs_init_fs_context+0x70/0x70 [ 3016.074726][T25912] new_inode_pseudo+0x38/0x1c0 [ 3016.079498][T25912] __sock_create+0x122/0x4e0 17:31:59 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xbf22}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x732, 0x7fff, 0x20, {0x2, 0x8001}, 0xd6}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0xa0, 0x20, 0x5}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:31:59 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 17:31:59 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x20010, r0, 0x8000000) 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}], 0x4) [ 3016.084157][T25912] __sys_socketpair+0x192/0x810 [ 3016.089004][T25912] __x64_sys_socketpair+0x4e/0x60 [ 3016.094068][T25912] do_syscall_64+0x44/0xa0 [ 3016.098482][T25912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3016.104516][T25912] RIP: 0033:0x7f41d6abb709 [ 3016.108917][T25912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3016.128518][T25912] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:31:59 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {0x0}], 0x5) 17:31:59 executing program 5: r0 = io_uring_setup(0x32b9, &(0x7f0000000080)={0x0, 0xd7ec, 0x4, 0x2, 0x241}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = eventfd2(0x4, 0x1) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x20800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r1, r1, r0, r2, r0, r1, r3, r1, r4], 0xa) io_uring_enter(r1, 0x5c81, 0xa0ff, 0x2, &(0x7f0000000000)={[0x7]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) [ 3016.136927][T25912] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3016.144958][T25912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3016.152962][T25912] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3016.160955][T25912] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.168922][T25912] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 [ 3016.176965][T25912] socket: no more sockets 17:32:00 executing program 4: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:00 executing program 3: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:00 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x562a, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140), 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080), 0x1) io_uring_setup(0x7137, &(0x7f0000000000)={0x0, 0x177e, 0x1, 0x1, 0x2f4, 0x0, r1}) eventfd2(0x9, 0x800) 17:32:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 7) 17:32:00 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {0x0}], 0x5) 17:32:00 executing program 5: r0 = io_uring_setup(0x5520, &(0x7f0000000040)={0x0, 0x6bb6, 0x10, 0xfffffffe}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x10000000) [ 3016.828261][T25945] FAULT_INJECTION: forcing a failure. [ 3016.828261][T25945] name failslab, interval 1, probability 0, space 0, times 0 [ 3016.840901][T25945] CPU: 0 PID: 25945 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3016.849705][T25945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3016.859756][T25945] Call Trace: [ 3016.863027][T25945] dump_stack_lvl+0xd6/0x122 [ 3016.867616][T25945] dump_stack+0x11/0x1b [ 3016.871770][T25945] should_fail+0x23c/0x250 17:32:00 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {0x0}], 0x5) 17:32:00 executing program 5: r0 = io_uring_setup(0x24, &(0x7f00000010c0)={0x0, 0xd7f5, 0x0, 0x0, 0x3bc}) r1 = io_uring_setup(0x7406, &(0x7f00000011c0)={0x0, 0x5278, 0x8, 0x1, 0x1b7}) r2 = io_uring_setup(0x7e4d, &(0x7f0000001240)={0x0, 0x8ceb, 0x10, 0x2, 0x18b, 0x0, r0}) r3 = syz_io_uring_setup(0x5ae9, &(0x7f00000012c0)={0x0, 0x52a9, 0x0, 0x0, 0x392}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b30000/0x4000)=nil, &(0x7f0000001340), &(0x7f0000001380)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000001400)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "a97f00de00008000"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000013c0)=[r2, r3, r0, r0, r0, r4, r5, r6, r7], 0x9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) read$ptp(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r8 = syz_io_uring_setup(0x6ec7, &(0x7f0000000040)={0x0, 0xfea, 0x0, 0x0, 0x3a2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000001140), &(0x7f0000001180)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x100010, r8, 0x0) [ 3016.876179][T25945] ? security_inode_alloc+0x30/0x180 [ 3016.881463][T25945] __should_failslab+0x81/0x90 [ 3016.886228][T25945] should_failslab+0x5/0x20 [ 3016.890759][T25945] kmem_cache_alloc+0x4f/0x300 [ 3016.895571][T25945] security_inode_alloc+0x30/0x180 [ 3016.900738][T25945] inode_init_always+0x20b/0x430 [ 3016.905675][T25945] ? sockfs_init_fs_context+0x70/0x70 [ 3016.911178][T25945] new_inode_pseudo+0x73/0x1c0 [ 3016.915978][T25945] __sock_create+0x122/0x4e0 [ 3016.920561][T25945] __sys_socketpair+0x192/0x810 [ 3016.925419][T25945] __x64_sys_socketpair+0x4e/0x60 [ 3016.930440][T25945] do_syscall_64+0x44/0xa0 [ 3016.934874][T25945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3016.940782][T25945] RIP: 0033:0x7f41d6abb709 [ 3016.945185][T25945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3016.964884][T25945] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:00 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:00 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, r1, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x8) [ 3016.973340][T25945] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3016.981318][T25945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3016.989363][T25945] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3016.997428][T25945] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3017.005465][T25945] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 [ 3017.013485][T25945] socket: no more sockets 17:32:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 8) 17:32:00 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) [ 3017.110326][T25970] FAULT_INJECTION: forcing a failure. [ 3017.110326][T25970] name failslab, interval 1, probability 0, space 0, times 0 [ 3017.123002][T25970] CPU: 0 PID: 25970 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3017.131762][T25970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3017.141842][T25970] Call Trace: [ 3017.145154][T25970] dump_stack_lvl+0xd6/0x122 [ 3017.149749][T25970] dump_stack+0x11/0x1b [ 3017.153897][T25970] should_fail+0x23c/0x250 [ 3017.158309][T25970] __should_failslab+0x81/0x90 [ 3017.163094][T25970] ? __request_module+0x1d3/0x670 [ 3017.168118][T25970] should_failslab+0x5/0x20 [ 3017.172658][T25970] kmem_cache_alloc_trace+0x52/0x320 [ 3017.177945][T25970] ? __sock_create+0x272/0x4e0 [ 3017.182791][T25970] __request_module+0x1d3/0x670 [ 3017.187638][T25970] ? security_inode_alloc+0x30/0x180 [ 3017.192952][T25970] ? selinux_inode_alloc_security+0xf6/0x110 [ 3017.198925][T25970] __sock_create+0x272/0x4e0 [ 3017.203514][T25970] __sys_socketpair+0x192/0x810 17:32:00 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x8000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:00 executing program 1: r0 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 3017.208365][T25970] __x64_sys_socketpair+0x4e/0x60 [ 3017.213387][T25970] do_syscall_64+0x44/0xa0 [ 3017.217801][T25970] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3017.223697][T25970] RIP: 0033:0x7f41d6abb709 [ 3017.228108][T25970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3017.247713][T25970] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:00 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x13, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r2 = fork() getpriority(0x0, r2) [ 3017.256129][T25970] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3017.264202][T25970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3017.272173][T25970] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3017.280139][T25970] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3017.288103][T25970] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:32:00 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r1 = pidfd_open(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x840) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = eventfd2(0x4, 0x0) r5 = io_uring_setup(0x235a, &(0x7f0000000040)={0x0, 0xcc29, 0x20, 0x0, 0xbc, 0x0, r0}) r6 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x800) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x10000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[r1, r3, r4, r5, r7]}, 0x5) 17:32:00 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:01 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 17:32:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 9) 17:32:01 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) read$ptp(r0, &(0x7f0000000080)=""/111, 0x6f) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0xf3, 0x0, 'client0\x00', 0x3, "8226256ff9295268", "3cf5f9dfd339f1132a0274ca8edeeb79b527b3f11dd91ebfac09a7792136822c", 0x5, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000000c0)={0xfffffffa, 0x2, 'client1\x00', 0x80000006, "74a5a6fc431550a1", "9c47dabb65f407bf14c52c70d379f52357f28d591fab097acda641f82743b314", 0x7, 0x1f}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {0x0}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) [ 3017.490662][T25997] FAULT_INJECTION: forcing a failure. [ 3017.490662][T25997] name failslab, interval 1, probability 0, space 0, times 0 [ 3017.503296][T25997] CPU: 0 PID: 25997 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3017.512119][T25997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3017.522174][T25997] Call Trace: [ 3017.525449][T25997] dump_stack_lvl+0xd6/0x122 [ 3017.530042][T25997] dump_stack+0x11/0x1b [ 3017.534200][T25997] should_fail+0x23c/0x250 [ 3017.538607][T25997] ? __request_module+0x1ee/0x670 [ 3017.543629][T25997] __should_failslab+0x81/0x90 [ 3017.548472][T25997] should_failslab+0x5/0x20 [ 3017.552977][T25997] __kmalloc_track_caller+0x6d/0x350 [ 3017.558260][T25997] ? kmem_cache_alloc_trace+0x221/0x320 [ 3017.563830][T25997] kstrdup+0x31/0x70 [ 3017.567782][T25997] __request_module+0x1ee/0x670 [ 3017.572651][T25997] ? security_inode_alloc+0x30/0x180 [ 3017.577933][T25997] ? selinux_inode_alloc_security+0xf6/0x110 [ 3017.583932][T25997] __sock_create+0x272/0x4e0 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {0x0}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) [ 3017.588526][T25997] __sys_socketpair+0x192/0x810 [ 3017.593486][T25997] __x64_sys_socketpair+0x4e/0x60 [ 3017.598513][T25997] do_syscall_64+0x44/0xa0 [ 3017.602939][T25997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3017.608835][T25997] RIP: 0033:0x7f41d6abb709 [ 3017.613240][T25997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3017.632856][T25997] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:01 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) 17:32:01 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f3, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r0, 0x10000000) r1 = io_uring_setup(0x65c5, &(0x7f00000000c0)={0x0, 0x6fb9, 0x1, 0x2, 0xd6, 0x0, r0}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x47bb, &(0x7f0000000300)={0x0, 0x20475, 0x1, 0x0, 0x3a8, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r3 = syz_io_uring_setup(0x3f29, &(0x7f0000000180)={0x0, 0xfe43, 0x10, 0x1, 0x39b, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x810, r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000005c0)=r4, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = io_uring_setup(0x362a, &(0x7f0000000380)={0x0, 0x55f3, 0x0, 0x2, 0x111, 0x0, r4}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000400)=r4, 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r8 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r8, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r5, 0xffffffffffffffff, r3, r3, r6], 0x5) 17:32:01 executing program 3: r0 = socket(0x1d, 0x80000, 0x4) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x1c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) [ 3017.641270][T25997] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3017.649236][T25997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3017.657220][T25997] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3017.665184][T25997] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 3017.673154][T25997] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {0x0}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 10) [ 3017.758929][T26020] FAULT_INJECTION: forcing a failure. [ 3017.758929][T26020] name failslab, interval 1, probability 0, space 0, times 0 [ 3017.771565][T26020] CPU: 0 PID: 26020 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3017.780322][T26020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3017.790370][T26020] Call Trace: [ 3017.793644][T26020] dump_stack_lvl+0xd6/0x122 [ 3017.798232][T26020] dump_stack+0x11/0x1b [ 3017.802385][T26020] should_fail+0x23c/0x250 17:32:01 executing program 4: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x181400, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3], 0x9) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) [ 3017.806795][T26020] __should_failslab+0x81/0x90 [ 3017.811559][T26020] ? call_usermodehelper_setup+0x71/0x190 [ 3017.817346][T26020] should_failslab+0x5/0x20 [ 3017.821906][T26020] kmem_cache_alloc_trace+0x52/0x320 [ 3017.827201][T26020] ? __kmalloc_track_caller+0x247/0x350 [ 3017.832745][T26020] call_usermodehelper_setup+0x71/0x190 [ 3017.838357][T26020] ? __request_module+0x670/0x670 [ 3017.843385][T26020] __request_module+0x273/0x670 [ 3017.848242][T26020] ? security_inode_alloc+0x30/0x180 [ 3017.853521][T26020] ? selinux_inode_alloc_security+0xf6/0x110 17:32:01 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000f, 0x140030, r0, 0x8000000) [ 3017.859491][T26020] __sock_create+0x272/0x4e0 [ 3017.864080][T26020] __sys_socketpair+0x192/0x810 [ 3017.868923][T26020] __x64_sys_socketpair+0x4e/0x60 [ 3017.873985][T26020] do_syscall_64+0x44/0xa0 [ 3017.878404][T26020] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3017.884323][T26020] RIP: 0033:0x7f41d6abb709 [ 3017.888734][T26020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) [ 3017.908339][T26020] RSP: 002b:00007f41d4833188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3017.916749][T26020] RAX: ffffffffffffffda RBX: 00007f41d6bbff60 RCX: 00007f41d6abb709 [ 3017.924714][T26020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3017.932781][T26020] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3017.940809][T26020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 3017.948780][T26020] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:32:01 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x30, r1, 0x8000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x1, 0xdee, 0x1, 0x20}, 0x2}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040027bd7000fe3e8aa2b1fc000097fdb598b527ef4224993970de00f29688a4944602000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, r0, 0x8000000) 17:32:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (fail_nth: 11) 17:32:01 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3d800006212bcd59f405b7661bb5c366fa35538944f4317938ec04be2a13697bed2bcd05eaeba1fe39a1f1c5192f5cc3d72e", @ANYRES32=r0, @ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004840) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:01 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r0, 0x8000000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) [ 3018.149724][T26047] FAULT_INJECTION: forcing a failure. [ 3018.149724][T26047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3018.162846][T26047] CPU: 1 PID: 26047 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 3018.171606][T26047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3018.181740][T26047] Call Trace: [ 3018.185015][T26047] dump_stack_lvl+0xd6/0x122 [ 3018.189606][T26047] dump_stack+0x11/0x1b [ 3018.193761][T26047] should_fail+0x23c/0x250 [ 3018.198194][T26047] should_fail_usercopy+0x16/0x20 [ 3018.203249][T26047] _copy_to_user+0x1c/0x90 [ 3018.207763][T26047] simple_read_from_buffer+0xab/0x120 [ 3018.213194][T26047] proc_fail_nth_read+0x10d/0x150 [ 3018.218295][T26047] ? proc_fault_inject_write+0x230/0x230 [ 3018.224207][T26047] vfs_read+0x1e6/0x750 [ 3018.228367][T26047] ? __sock_create+0x43f/0x4e0 [ 3018.233129][T26047] ? __fget_light+0x21b/0x260 [ 3018.237807][T26047] ? __cond_resched+0x11/0x40 [ 3018.242484][T26047] ksys_read+0xd9/0x190 [ 3018.246655][T26047] __x64_sys_read+0x3e/0x50 [ 3018.251338][T26047] do_syscall_64+0x44/0xa0 [ 3018.255753][T26047] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3018.261764][T26047] RIP: 0033:0x7f41d6a6e48c [ 3018.266168][T26047] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3018.285768][T26047] RSP: 002b:00007f41d4833170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 17:32:01 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0x315c}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="4d705fd50b000000000000", @ANYRES32=0x0, @ANYBLOB="0001004000006a730000703c48f300200064000001299078e0000001640101028904f6780188070110940999"]}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x3c, "43ab0306d3d0af1bbf88cb0cbdcc4749ebbfeda1e1086ea0f0bb4dfda539b51f0f31661992bd1b417dfb99701d3aab22c8f9a62355c756b2e0c16bc0"}, &(0x7f0000000180)=0x60) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x7, 0x0, &(0x7f0000000000)=[r0, r2, r0, r5, r0, r0, r6, r7, 0xffffffffffffffff]}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:01 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71ab, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x40, 0x0, 0x5, {0xffffff84, 0xfffff800}, 0xbb8}) 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:01 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1, r2, r0], 0x3) 17:32:01 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = io_uring_setup(0x5f41, &(0x7f0000000040)={0x0, 0x9b84, 0x8, 0x0, 0x18d}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:01 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) [ 3018.294287][T26047] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f41d6a6e48c [ 3018.302322][T26047] RDX: 000000000000000f RSI: 00007f41d48331e0 RDI: 0000000000000003 [ 3018.310364][T26047] RBP: 00007f41d48331d0 R08: 0000000000000000 R09: 0000000000000000 [ 3018.318333][T26047] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 3018.326316][T26047] R13: 00007ffc7dac8d1f R14: 00007f41d4833300 R15: 0000000000022000 17:32:01 executing program 5: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/167, 0xa7}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9) r0 = io_uring_setup(0x7f46, &(0x7f0000000040)={0x0, 0xd7f1, 0x4}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x4010, r0, 0x10000000) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71aa, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:02 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r1, 0x10000000) 17:32:02 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x110, 0xffffffffffffffff, 0x10000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x40, 0x3, 0x61, 0x4, 0xffffffd7}) io_uring_setup(0x4764, &(0x7f0000000000)={0x0, 0x57a7, 0x4, 0x3, 0x2f7}) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x8080, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000200)={'\x00', 0x5, 0x2, 0x6}) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x7000) shmdt(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x264101, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x1000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = syz_io_uring_setup(0x5701, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) recvfrom$inet6(r2, &(0x7f00000000c0)=""/231, 0xe7, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[r2]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 17:32:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0xa00, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) 17:32:02 executing program 5: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x22db, @loopback, 0x7}, {0xa, 0x4e24, 0x94c, @local, 0x1}, 0x9, [0x5e0fa5e6, 0x1, 0x6, 0x3, 0xfffffff7, 0x800, 0x8, 0x5]}, 0x5c) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f5, 0x10}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:02 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x8000000) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x19b30c3a, {{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x3, @mcast1, 0x1cd2}}, {{0xa, 0x4e21, 0x3, @loopback, 0x101}}, {{0xa, 0x4e22, 0x7, @mcast1}}]}, 0x210) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:02 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0x400ddb5, 0x20}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {0x0}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x689, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x20000880) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x6, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x20a000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7d68cc271315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[r1, r2, r0, r0, r3, r4, r5, r0, r0, r0]}, 0xa) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="08002bbd7000ffdbdf250800000005000100000000002d00070073797374656d5f753a6f626a6563745f723a6465766963656b69745f7661725f72756e5f743a733000000000140006006261746164765f736c6176655f3000002f00070073797374656d5f753a6f626a6563745f723a73657472616e735f696e697472635f657865635f743a7330000014000300fe8000000000000000000000000000bb08000400e000000114000300ff02000000000000000000000000000108000500e0000001f6aa3e5fd37a05c4a22a132c6bca2152cba0d7743bd132bef59722cc5b2ebed01a572390063b0335e69af922f3bc19aa3b3e89aca132219b0bcf940416ee4fa837209a99ef69ac01772e9fa0d8cdcc2d87ce38e591292b6b6916e6f077b407d31c431387050f878dddc4a6"], 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) 17:32:02 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r1, r2, r0, r0, r3, r0, r0, r4], 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmget(0x3, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 3: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, r0, 0x0) 17:32:02 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x1, &(0x7f0000000180)) 17:32:02 executing program 5: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x14, 0x2, 0x4, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x1, 0x7fff, 0x800}}) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x1000, "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"}, &(0x7f0000001180)=0x1024) 17:32:02 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x105102, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000040)={{0xda8b, 0xd749}, {0x0, 0x4}, 0x4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:02 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a180, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x54, 0x7f, 0x3, 0x9, 0x0, 0x80000000, 0x4, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x800, 0xb8a}, 0x4000, 0x2, 0x800, 0x0, 0x8000, 0x8, 0x5401, 0x0, 0x38a, 0x0, 0xa1}, 0xffffffffffffffff, 0x1, r0, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000001c0)="25ba90d0974c26f1f7918b48474cc015", 0x10) r3 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) io_uring_setup(0x3eff, &(0x7f00000000c0)={0x0, 0x5019, 0x8, 0x2, 0x2af, 0x0, r3}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x10000000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=0x92) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xbe, 0x9, 0x5a, @dev={0xfe, 0x80, '\x00', 0x1e}, @private1, 0x700, 0x7800, 0x3, 0xb1dc}}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = syz_io_uring_setup(0x19b2, &(0x7f0000000000)={0x0, 0xbb32, 0x1, 0x0, 0x367, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000100), 0x1) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:02 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40088d1}, 0x40001) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="c7017f0000000000000000060008000800040003000001992704a5eb2352f8be490fb2676a5f2489c241d47b299a2e7aa52243878927e19b092bc8d37379b2b565b7785810169310c18f3fd530bb1414b1c4874cdaee8187c81d0a6c53d1901a3d04777da590b8c04c26bddb457b672b33"], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008850) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = io_uring_setup(0x1984, &(0x7f00000000c0)={0x0, 0x8925, 0x0, 0x2, 0x18d, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) 17:32:02 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x62, &(0x7f0000000340)={0x0, 0xfffffffe, 0x1, 0x3, 0x59, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000080)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:02 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmget(0x2, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x9, 0x0, 0x0, &(0x7f0000000000)) 17:32:02 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 17:32:02 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x4) 17:32:02 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xa, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:03 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x4, 0x8b}, @window={0x3, 0xffff, 0x6}, @sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x9, 0x5171}], 0x6) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:03 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0xffffffffffffffff, &(0x7f0000ff6000/0xa000)=nil, 0x4000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:03 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket(0x26, 0x6, 0xffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x44}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}}, 0x800) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x200, 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r3, r4, r5, r6, r0], 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:03 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:03 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x10a) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0xc6, 0x7f, 0x0, 0x2e, 0x0, 0x4, 0x142, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xe1ad, 0x10001}, 0x741, 0x3, 0x9, 0x9, 0x0, 0x4, 0x6, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x7) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xc, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x61, &(0x7f00000000c0)={0x0, 0x9649, 0x0, 0x2, 0x3c9}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x80010, r1, 0x0) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x212000, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xd, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 5: r0 = syz_io_uring_setup(0x1989, &(0x7f00000000c0)={0x0, 0x5b3c, 0x4, 0x3, 0x1a1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = io_uring_setup(0x4fde, &(0x7f0000000180)={0x0, 0x3d91, 0x4, 0x1, 0x2c9, 0x0, r0}) r2 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x0, 0x0, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x10000000) 17:32:03 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xe, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = io_uring_setup(0x40c5, &(0x7f0000000000)={0x0, 0x5fca, 0x1, 0x2, 0x105}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "78c152b5a700", "7eab97f9", "88ab5e3c732bf8a9"}, 0xfffffffffffffe69) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES16=r5, @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, 0x0, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x20010, r0, 0x0) syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:03 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_setup(0x4b24, &(0x7f00000000c0)={0x0, 0xe6d4, 0x4, 0x1, 0x365}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 17:32:03 executing program 4: r0 = socket(0x10, 0x2, 0x7) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x1f4}}, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:klogd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 17:32:03 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x228440) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24044850) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1f}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000810) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40000c0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:03 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x2, 0x147}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xc4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c240) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x7, 0x0, 'queue1\x00', 0x9}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x8000000) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 5: r0 = io_uring_setup(0x2a, &(0x7f0000000040)={0x0, 0x8000120a, 0x0, 0x0, 0x200000}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_io_uring_setup(0x5a5b, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x12, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x30, 0xffffffffffffffff, 0x8000000) 17:32:03 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9) 17:32:03 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2d, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x4, 0x1, 0x2}) 17:32:03 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x20}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:03 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) syz_io_uring_setup(0x423f, &(0x7f0000000000)={0x0, 0x2e94, 0x1, 0x0, 0x2dc}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x34bc, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x10, 0x7, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x0, 0x92, 0x1f, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x40, 0x1fe0000, 0x3}}) 17:32:03 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket(0x8, 0x5, 0xfffffffb) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r0, r1, r2, r0, r0], 0x6) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x48, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffff801, @mcast2, 0x8001}, 0x1c) 17:32:03 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000500)=""/121, 0x79}], 0x5) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = io_uring_setup(0x3a28, &(0x7f0000000100)={0x0, 0xd4cd, 0x8, 0x2, 0x37c}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_io_uring_setup(0x1611, &(0x7f0000000000)={0x0, 0x748f, 0x1, 0x1, 0x146}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, 0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x21) 17:32:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4c, 0x0, 0x0, &(0x7f0000000000)) 17:32:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:04 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = io_uring_setup(0x2c5, &(0x7f0000000080)={0x0, 0x617f, 0x1, 0x1, 0xcf}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r0, 0x8000000) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) io_uring_setup(0xca, &(0x7f0000000280)={0x0, 0x860a, 0x1, 0x1, 0x35a, 0x0, r0}) r2 = syz_io_uring_setup(0x49, &(0x7f0000000440)={0x0, 0x33f2, 0x0, 0x1, 0x398, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000100)) r3 = syz_io_uring_setup(0x4802, &(0x7f0000000200)={0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_setup(0x7215, &(0x7f0000000000)={0x0, 0xc5ba, 0x20, 0x3, 0x1d2, 0x0, r3}) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 17:32:04 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:04 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x400, 0x0, &(0x7f0000000000)=[r1, r2, r0, r0, r0]}, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{0x7f, 0x1}, 'port1\x00', 0xc0, 0x1, 0x401, 0x401, 0xe346, 0x80}) 17:32:04 executing program 3: r0 = io_uring_setup(0x5fc2, &(0x7f0000000000)={0x0, 0xba0f, 0x0, 0x0, 0xf0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x140030, r0, 0x8000000) r1 = io_uring_setup(0x2bd, &(0x7f0000000080)={0x0, 0xb2e2, 0x0, 0x0, 0x1bd}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000200)={0x7f, 0x0, 'client0\x00', 0xffffffff80000005, "a0c855cdb3dcf3ba", "44d2f44de023ff436bde428f686fc1214d511cedab3588a6bdd04d1a0fb61d4d", 0x5, 0x8}) syz_io_uring_setup(0x721a, &(0x7f0000000100)={0x0, 0xabcf, 0x8, 0x1, 0x2c6, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xfffffffa, 0x5, 0x1, 'queue0\x00', 0x3}) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x68, 0x0, 0x0, &(0x7f0000000000)) 17:32:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 1) [ 3020.585504][T26381] FAULT_INJECTION: forcing a failure. [ 3020.585504][T26381] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.598155][T26381] CPU: 0 PID: 26381 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3020.606922][T26381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3020.616974][T26381] Call Trace: [ 3020.620271][T26381] dump_stack_lvl+0xd6/0x122 [ 3020.625034][T26381] dump_stack+0x11/0x1b [ 3020.629245][T26381] should_fail+0x23c/0x250 [ 3020.633660][T26381] __should_failslab+0x81/0x90 [ 3020.638428][T26381] ? io_sqe_buffers_register+0x127/0x920 [ 3020.644076][T26381] should_failslab+0x5/0x20 [ 3020.648585][T26381] kmem_cache_alloc_trace+0x52/0x320 [ 3020.653914][T26381] ? 0xffffffff81000000 [ 3020.658066][T26381] io_sqe_buffers_register+0x127/0x920 [ 3020.663526][T26381] ? __fget_light+0x21b/0x260 [ 3020.668205][T26381] __do_sys_io_uring_register+0x513/0x21a0 [ 3020.674112][T26381] ? fput+0x2d/0x130 [ 3020.678099][T26381] ? ksys_write+0x162/0x190 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6c, 0x0, 0x0, &(0x7f0000000000)) 17:32:04 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x200}) r1 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x74, 0x0, 0x0, &(0x7f0000000000)) [ 3020.682605][T26381] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3020.688678][T26381] __x64_sys_io_uring_register+0x4f/0x60 [ 3020.694308][T26381] do_syscall_64+0x44/0xa0 [ 3020.698733][T26381] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3020.704627][T26381] RIP: 0033:0x7f610f709709 [ 3020.709035][T26381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:04 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:04 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) [ 3020.728731][T26381] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3020.737143][T26381] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3020.745132][T26381] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3020.753100][T26381] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3020.761067][T26381] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3020.769033][T26381] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:04 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)={0x2, {{0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3f}}, {{0xa, 0x4e22, 0x1, @private2, 0x10001}}, {{0xa, 0x4e20, 0xadae, @empty, 0x1ff}}, {{0xa, 0x4e21, 0x83, @remote, 0x8000}}]}, 0x290) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000380)={0x8ded, 0x9, 0x0, 0x4, 0x7ff, 0x10001}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:04 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x41cc173, r0, 0x8000000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 17:32:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 2) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7a, 0x0, 0x0, &(0x7f0000000000)) 17:32:04 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) [ 3020.914885][T26406] FAULT_INJECTION: forcing a failure. [ 3020.914885][T26406] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.927620][T26406] CPU: 1 PID: 26406 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3020.936376][T26406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3020.946425][T26406] Call Trace: [ 3020.951521][T26406] dump_stack_lvl+0xd6/0x122 [ 3020.956116][T26406] dump_stack+0x11/0x1b [ 3020.960305][T26406] should_fail+0x23c/0x250 [ 3020.964741][T26406] ? kzalloc+0x30/0x30 [ 3020.968883][T26406] __should_failslab+0x81/0x90 [ 3020.973763][T26406] ? percpu_ref_init+0x96/0x250 [ 3020.978828][T26406] should_failslab+0x5/0x20 [ 3020.983687][T26406] kmem_cache_alloc_trace+0x52/0x320 [ 3020.988977][T26406] ? kzalloc+0x30/0x30 [ 3020.993235][T26406] percpu_ref_init+0x96/0x250 [ 3020.997929][T26406] io_sqe_buffers_register+0x149/0x920 [ 3021.003418][T26406] ? __fget_light+0x21b/0x260 [ 3021.008174][T26406] __do_sys_io_uring_register+0x513/0x21a0 [ 3021.014048][T26406] ? fput+0x2d/0x130 [ 3021.017954][T26406] ? ksys_write+0x162/0x190 [ 3021.022458][T26406] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3021.028560][T26406] __x64_sys_io_uring_register+0x4f/0x60 [ 3021.034193][T26406] do_syscall_64+0x44/0xa0 [ 3021.038646][T26406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3021.044771][T26406] RIP: 0033:0x7f610f709709 [ 3021.049191][T26406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3021.068808][T26406] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3021.077406][T26406] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3021.085381][T26406] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3021.093352][T26406] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3021.101318][T26406] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 17:32:04 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f00000000c0)={0x0, 0xfffffffc}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) 17:32:04 executing program 5: io_uring_setup(0x10026, &(0x7f0000000040)={0x0, 0xd7f0, 0x10}) r0 = syz_io_uring_setup(0x71af, &(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x8, {{0xa, 0x4e20, 0xa9, @remote, 0x815}}}, 0x88) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2cc, 0x0, 0x0, &(0x7f0000000000)) 17:32:04 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 17:32:04 executing program 2: getpriority(0x1, 0x0) 17:32:04 executing program 2: getpriority(0x1, 0x0) [ 3021.109377][T26406] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:04 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x344, 0x14, 0x4908a68b8672086, 0x70bd27, 0x25dfdbfd, {0x10, 0xb2}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "32996c99519e8c792747180bb4bb8d49e00a341231f12eb7bc342a21b6d17f9c222d39d1939a46dfaa479c842489e69764fdfcf1c084fa846d401b7cb995f4b9b38864471c3661e12b5c78309a655ceb824d18489413e2ab099e4b675b3b521c6090d5733b4a5f87a19d18111a7259a0d85801a5cc776fc9afd6c0"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "feef913a293200ebaa69ef5f7c0f7b625a6bb9b4e68fafe50b8edf606b533f22f9845615f5d329a50d409651d771e3c675b87a03f6f2762fb8"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "190693bfd058ad589e13098449a628adf7675fab418a5a51e44b83374a6a221262201674cd6b6acbbcc5d372d4ee6dc3e0f9a731969d7b9f3a4603a9cdfc3b97d130e69c4605fb88f975ee4eb73a959851feb83fbebd14a08f080df2fda3542a78a5e7790253ca688fee157a078ed5113a4c5ef3fdbea7f1692d1ae4e895e139ef344d28f5d066529ce40b8d06264b49964588912a75b26650a423622f01c8d613bac448d28cad5c2a09ea3de58bf3c7f2d6c0b86447a905e0ee57e92a6f36164de301d0e4f630543f61ce9516"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "80cdd095c044847113b155c288daca4149d2ab331df70f1e1a3a9fe9089f2b77e138730f0d4532eb9dbb17d22b2a7ce67a89ad78c1cf117f71e96985da6caa90c3dae4543f7c0b567a3815f30474da5adb8f3479efecdcbd01844b3489672cbd5c996f1f56a00e416451309b52f6539623c3e8e19641e8cc07607b0ab48607435ec484ebd93c42cb59c8b1de498450a5a5269edcb77afc6e621445e038db955d428a0e84a285f7553c26ba4e3de4c70ca12d15ac2a68a30dd058a3c91ab8b5a39ad2443023a7b2f89ecb91a27de203ded930b6efd9ad68afd71dbc4aa8e148cdf53900436a90552ba00e"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "5453ab26534c7d737c7210069a144ad5c155de7b9e945add872a0a1d2d2ea75307b72fb2c11dbdb40b790d4044d6f213d65cb4563cbc43767a558cbb4998759fb32b97fab1ab5e44060f14b7ab832b22b3f2f87628988f935e5c38b1bed85b3bcaed0ce43fe9e5fab6f74790555edf930fc11ee45ffb7abb1e6dd88b5782eb83d3516c98c463e1a4933bc21362c8aece991ab55f114f86eeb044704924bb1ac713b771dd89ed46"}]}, 0x344}, 0x1, 0x0, 0x0, 0x44080}, 0x20000080) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40011, 0xffffffffffffffff, 0x8000000) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x300, 0x0, 0x0, &(0x7f0000000000)) 17:32:04 executing program 5: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x2c602) r2 = syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0x8064, 0x10, 0x1, 0x34, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x50, r2, 0x8000000) syz_io_uring_setup(0x2d29, &(0x7f0000000180)={0x0, 0x41e5, 0x1, 0x0, 0x112}, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 3) 17:32:04 executing program 3: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 17:32:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x480, 0x0, 0x0, &(0x7f0000000000)) [ 3021.262708][T26437] FAULT_INJECTION: forcing a failure. [ 3021.262708][T26437] name failslab, interval 1, probability 0, space 0, times 0 [ 3021.275403][T26437] CPU: 1 PID: 26437 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3021.284162][T26437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3021.294216][T26437] Call Trace: [ 3021.297509][T26437] dump_stack_lvl+0xd6/0x122 [ 3021.302102][T26437] dump_stack+0x11/0x1b [ 3021.306275][T26437] should_fail+0x23c/0x250 [ 3021.310685][T26437] __should_failslab+0x81/0x90 [ 3021.315455][T26437] ? io_rsrc_data_alloc+0x44/0x3e0 [ 3021.320734][T26437] should_failslab+0x5/0x20 [ 3021.325252][T26437] kmem_cache_alloc_trace+0x52/0x320 [ 3021.330549][T26437] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 3021.335745][T26437] io_rsrc_data_alloc+0x44/0x3e0 [ 3021.340721][T26437] ? kzalloc+0x30/0x30 [ 3021.344805][T26437] ? percpu_ref_init+0x1f2/0x250 [ 3021.349742][T26437] ? kzalloc+0x30/0x30 [ 3021.353829][T26437] io_sqe_buffers_register+0xe3/0x920 [ 3021.359290][T26437] ? __fget_light+0x21b/0x260 [ 3021.363965][T26437] __do_sys_io_uring_register+0x513/0x21a0 [ 3021.369768][T26437] ? fput+0x2d/0x130 [ 3021.373658][T26437] ? ksys_write+0x162/0x190 [ 3021.378192][T26437] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3021.384256][T26437] __x64_sys_io_uring_register+0x4f/0x60 [ 3021.389979][T26437] do_syscall_64+0x44/0xa0 [ 3021.394555][T26437] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3021.400674][T26437] RIP: 0033:0x7f610f709709 [ 3021.405130][T26437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3021.424735][T26437] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3021.433147][T26437] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3021.441136][T26437] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3021.449234][T26437] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 17:32:05 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 17:32:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x500, 0x0, 0x0, &(0x7f0000000000)) 17:32:05 executing program 2: getpriority(0x1, 0x0) 17:32:05 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000d, 0x2010, 0xffffffffffffffff, 0x10000000) 17:32:05 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x80000001, 0x4) r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 4) [ 3021.457196][T26437] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3021.465169][T26437] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:05 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) [ 3021.537696][T26449] FAULT_INJECTION: forcing a failure. [ 3021.537696][T26449] name failslab, interval 1, probability 0, space 0, times 0 [ 3021.550342][T26449] CPU: 1 PID: 26449 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3021.559167][T26449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3021.569241][T26449] Call Trace: [ 3021.572519][T26449] dump_stack_lvl+0xd6/0x122 [ 3021.577112][T26449] dump_stack+0x11/0x1b [ 3021.581266][T26449] should_fail+0x23c/0x250 [ 3021.585679][T26449] ? kcalloc+0x32/0x40 [ 3021.589773][T26449] __should_failslab+0x81/0x90 [ 3021.594582][T26449] should_failslab+0x5/0x20 [ 3021.599119][T26449] __kmalloc+0x6f/0x350 [ 3021.603268][T26449] ? io_rsrc_data_alloc+0x44/0x3e0 [ 3021.608399][T26449] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 3021.613597][T26449] kcalloc+0x32/0x40 [ 3021.617490][T26449] io_rsrc_data_alloc+0x80/0x3e0 [ 3021.622421][T26449] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 3021.627620][T26449] ? percpu_ref_init+0x1f2/0x250 [ 3021.632561][T26449] io_sqe_buffers_register+0xe3/0x920 [ 3021.637995][T26449] ? __fget_light+0x21b/0x260 [ 3021.642668][T26449] __do_sys_io_uring_register+0x513/0x21a0 [ 3021.648475][T26449] ? fput+0x2d/0x130 [ 3021.652373][T26449] ? ksys_write+0x162/0x190 [ 3021.656900][T26449] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3021.663020][T26449] __x64_sys_io_uring_register+0x4f/0x60 [ 3021.668717][T26449] do_syscall_64+0x44/0xa0 [ 3021.673250][T26449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3021.679147][T26449] RIP: 0033:0x7f610f709709 17:32:05 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) 17:32:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x600, 0x0, 0x0, &(0x7f0000000000)) 17:32:05 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000000c0)={0x7ff, 0xffffffff, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x5c, @tick=0x7, 0x1, {0x0, 0x20}, 0x8}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x24, "4cc8e98b27f4ff72e615e0fcd1e39ab1d14b28e120514b6da030597ffc2bfa1f1c4924e7"}, &(0x7f0000000080)=0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x700, 0x0, 0x0, &(0x7f0000000000)) 17:32:05 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = socket(0x10, 0x800, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socketpair(0x1e, 0x800, 0x5b8, &(0x7f0000000040)) [ 3021.683555][T26449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3021.703173][T26449] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3021.711685][T26449] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3021.719656][T26449] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3021.727623][T26449] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3021.735791][T26449] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3021.743763][T26449] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:05 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_io_uring_setup(0x100071af, &(0x7f0000000040), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 17:32:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x900, 0x0, 0x0, &(0x7f0000000000)) 17:32:05 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8982, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x81000, 0x8, 0x51cd, 0x3, 0xdd15, 0x8, 0x3, 0x0, 0xfffffe01, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0x3) 17:32:05 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) 17:32:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 5) 17:32:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1d01, &(0x7f0000000000)={0x0, 0x8e3f, 0x10, 0x2, 0x290}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_setup(0x111e, &(0x7f0000000100)={0x0, 0x5172, 0x0, 0x2, 0x278, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) 17:32:05 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x331d, &(0x7f0000000000)={0x0, 0x80, 0x4, 0x0, 0x29b}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) [ 3021.954564][T26480] FAULT_INJECTION: forcing a failure. [ 3021.954564][T26480] name failslab, interval 1, probability 0, space 0, times 0 [ 3021.967256][T26480] CPU: 1 PID: 26480 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3021.976017][T26480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3021.986070][T26480] Call Trace: [ 3021.989345][T26480] dump_stack_lvl+0xd6/0x122 [ 3021.993934][T26480] dump_stack+0x11/0x1b [ 3021.998119][T26480] should_fail+0x23c/0x250 17:32:05 executing program 2: getpgrp(0xffffffffffffffff) getpriority(0x1, 0x0) [ 3022.002529][T26480] ? kzalloc+0x1d/0x30 [ 3022.006586][T26480] __should_failslab+0x81/0x90 [ 3022.011383][T26480] should_failslab+0x5/0x20 [ 3022.015885][T26480] __kmalloc+0x6f/0x350 [ 3022.020079][T26480] ? kcalloc+0x32/0x40 [ 3022.024191][T26480] kzalloc+0x1d/0x30 [ 3022.028144][T26480] io_rsrc_data_alloc+0xfc/0x3e0 [ 3022.033146][T26480] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 3022.038346][T26480] io_sqe_buffers_register+0xe3/0x920 [ 3022.043718][T26480] ? __fget_light+0x21b/0x260 [ 3022.048393][T26480] __do_sys_io_uring_register+0x513/0x21a0 [ 3022.054263][T26480] ? fput+0x2d/0x130 [ 3022.058201][T26480] ? ksys_write+0x162/0x190 [ 3022.062712][T26480] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3022.068781][T26480] __x64_sys_io_uring_register+0x4f/0x60 [ 3022.074455][T26480] do_syscall_64+0x44/0xa0 [ 3022.078872][T26480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3022.084762][T26480] RIP: 0033:0x7f610f709709 17:32:05 executing program 2: getpgrp(0xffffffffffffffff) getpriority(0x1, 0x0) [ 3022.089169][T26480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.108772][T26480] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3022.117188][T26480] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3022.125159][T26480] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3022.133128][T26480] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.141089][T26480] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3022.149051][T26480] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:05 executing program 2: getpgrp(0xffffffffffffffff) getpriority(0x1, 0x0) 17:32:05 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x3, 0x12, 0x10, 0x18, "deeaed0e1392b3f72498b8c2a18a3067ba75d7725c1895c64ec5785610a766eeed01215eff39c518af6aa350002c7eaf080d0619a1352e1d48025022bd9a6079", "0a7167310281ec5956345cc6ad6e17483d0026e53f2472f7cda7b5a4954b9a97", [0x332, 0x3458]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x204440) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x5}, 'port1\x00', 0x20, 0x400, 0x4, 0x80000000, 0x9, 0x200, 0x0, 0x0, 0x0, 0xad}) 17:32:05 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x5ab8, &(0x7f0000000280)={0x0, 0x648c, 0x10, 0x1, 0x11e, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000440)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x4000010, r2, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x101, 0x7, {{0x28, 0x4, 0x2, 0x36, 0xa0, 0x67, 0x0, 0x3f, 0x29, 0x0, @private=0xa010101, @loopback, {[@generic={0x94, 0xe, "b4ca4ba561f70a01fbffa11c"}, @end, @timestamp={0x44, 0xc, 0xe6, 0x0, 0x3, [0x8a, 0x8]}, @end, @lsrr={0x83, 0xf, 0x3e, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x82, 0xc, "6445e69e08a91f4ee95d"}, @timestamp={0x44, 0x1c, 0x4a, 0x0, 0x8, [0x5, 0x6, 0x9, 0x200, 0x3, 0x8]}, @end, @timestamp={0x44, 0x28, 0x57, 0x0, 0x7, [0x4, 0x3, 0x4, 0x80000000, 0xfffffffb, 0x8, 0x8, 0x2, 0x5]}, @lsrr={0x83, 0xf, 0x21, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000640)={'gre0\x00', r3, 0x700, 0x0, 0x6, 0xc5, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x65, 0x0, 0xf7, 0x29, 0x0, @private=0xa010101, @empty, {[@cipso={0x86, 0x14, 0xfffffffffffffffc, [{0x1, 0xe, "171c3454550a44f97becdd1a"}]}, @ssrr={0x89, 0x13, 0xbc, [@empty, @loopback, @rand_addr=0x64010101, @multicast2]}, @noop, @lsrr={0x83, 0xf, 0x85, [@dev={0xac, 0x14, 0x14, 0x40}, @local, @dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp={0x44, 0x10, 0xbd, 0x0, 0x7, [0xff, 0x101, 0x800]}, @ra={0x94, 0x4, 0x1}]}}}}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/200, 0xc8}, {&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/109, 0x6d}], 0x3) 17:32:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xa00, 0x0, 0x0, &(0x7f0000000000)) 17:32:05 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) (fail_nth: 1) 17:32:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x300, 0x1f, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24080}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fbdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600000100000000000000000300855c37ffad25e962b1cf9eedfe31a5bc4b006ac9ae1acdf25e74ea5c9b7828c28ffc51e5957de55b33abaa420e0258eec1a10470ea29de46baa89b9f6ee51040ecb450d002d1012ae90c3b70f0c3d1314f4363fc84b9c73f66d7ca5ed5767a0a2561ab01d15eecf9407909083d3cd39a46e7685bbd367c7c2a2b8db5edbb399d9c92628d1e96c63240ff20c7accba37908ba4b4a7fde576cc5e31f7ff06fea8598a053490b62dfc26a76d82c68807311d318e193725aa65994f4a6c2d770073581e683b5427be65a14b9d69fdba83874be2f3d643affcbeb62a360bdc68c81a01c64443bd12363c1627042b58e6a9194edef80639a790617213d4b3c050f3920f30b83cb774a7e", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4885}, 0x40c4) r3 = syz_io_uring_setup(0x38f6, &(0x7f0000000000)={0x0, 0x4017, 0x1, 0x0, 0x69}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x8000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) r6 = io_uring_setup(0x233f, &(0x7f00000001c0)={0x0, 0xcaa0, 0x20, 0x1, 0x10f, 0x0, r3}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000a00)={0x16d, 0x0, &(0x7f00000009c0)=[r3, r3, r3, r3, r7, r8]}, 0x6) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x569708c27c8dab38}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x408, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b1cef2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1720521}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x577c5cc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c2079a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ff7c568}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c3c0715}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f58d74}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfe77163}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37b5c931}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x579e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4790}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c91f79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf0d05c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53d8f590}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80000000}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77701e1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa054}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a4e3515}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9768}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a0fcb0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc07a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f3fdda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x437f0679}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40489917}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30d22600}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65cc2e6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2764d7d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63d0b85a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd093}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e0f3a4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2792}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x304c5add}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x99556c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dc7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fc506dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8d3e734}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ccfd29a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e73bf48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab29}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2188}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57ab7193}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x808e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26c778c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35fc35fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7584}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9f65913}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c2b351d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11ad71ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66197814}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44c34bfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b5ecd14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ad4ae6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb2716ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x659ff250}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bcacbc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x420c84cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfa19c12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x309ce3f0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ad3b3bc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ccefc51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2761f709}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x135190d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72a3025}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce6f6b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x244d61bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3308e3a6}]}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x2}, 0x4094) [ 3022.286677][T26507] FAULT_INJECTION: forcing a failure. [ 3022.286677][T26507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3022.299925][T26507] CPU: 0 PID: 26507 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 3022.308747][T26507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3022.318884][T26507] Call Trace: [ 3022.322159][T26507] dump_stack_lvl+0xd6/0x122 [ 3022.326770][T26507] dump_stack+0x11/0x1b [ 3022.330925][T26507] should_fail+0x23c/0x250 [ 3022.335337][T26507] should_fail_usercopy+0x16/0x20 [ 3022.340362][T26507] _copy_to_user+0x1c/0x90 [ 3022.344810][T26507] simple_read_from_buffer+0xab/0x120 [ 3022.350265][T26507] proc_fail_nth_read+0x10d/0x150 [ 3022.355294][T26507] ? proc_fault_inject_write+0x230/0x230 [ 3022.360929][T26507] vfs_read+0x1e6/0x750 [ 3022.365180][T26507] ? __fget_light+0x21b/0x260 [ 3022.369503][T26513] FAULT_INJECTION: forcing a failure. [ 3022.369503][T26513] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.369862][T26507] ? __cond_resched+0x11/0x40 [ 3022.387097][T26507] ksys_read+0xd9/0x190 [ 3022.391253][T26507] __x64_sys_read+0x3e/0x50 [ 3022.395800][T26507] do_syscall_64+0x44/0xa0 [ 3022.400219][T26507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3022.406101][T26507] RIP: 0033:0x7f79d58ee48c [ 3022.410527][T26507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3022.430128][T26507] RSP: 002b:00007f79d36b3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3022.438527][T26507] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f79d58ee48c [ 3022.446480][T26507] RDX: 000000000000000f RSI: 00007f79d36b31e0 RDI: 0000000000000003 [ 3022.454447][T26507] RBP: 00007f79d36b31d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.462399][T26507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3022.470363][T26507] R13: 00007fffb824d8df R14: 00007f79d36b3300 R15: 0000000000022000 [ 3022.478322][T26513] CPU: 1 PID: 26513 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3022.487161][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3022.497202][T26513] Call Trace: [ 3022.500498][T26513] dump_stack_lvl+0xd6/0x122 [ 3022.505105][T26513] dump_stack+0x11/0x1b [ 3022.509254][T26513] should_fail+0x23c/0x250 [ 3022.513659][T26513] ? kzalloc+0x1d/0x30 [ 3022.517813][T26513] __should_failslab+0x81/0x90 [ 3022.522572][T26513] should_failslab+0x5/0x20 [ 3022.527120][T26513] __kmalloc+0x6f/0x350 [ 3022.531267][T26513] ? kzalloc+0x1d/0x30 [ 3022.535338][T26513] kzalloc+0x1d/0x30 [ 3022.539233][T26513] io_rsrc_data_alloc+0xfc/0x3e0 [ 3022.544171][T26513] ? io_rsrc_data_alloc+0x3e0/0x3e0 [ 3022.549451][T26513] io_sqe_buffers_register+0xe3/0x920 [ 3022.554816][T26513] ? __fget_light+0x21b/0x260 [ 3022.559562][T26513] __do_sys_io_uring_register+0x513/0x21a0 [ 3022.565374][T26513] ? fput+0x2d/0x130 [ 3022.569271][T26513] ? ksys_write+0x162/0x190 [ 3022.573775][T26513] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3022.579964][T26513] __x64_sys_io_uring_register+0x4f/0x60 [ 3022.585607][T26513] do_syscall_64+0x44/0xa0 [ 3022.590082][T26513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3022.596003][T26513] RIP: 0033:0x7f610f709709 [ 3022.600406][T26513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.620102][T26513] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3022.628517][T26513] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 17:32:05 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x0, 0x3}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x774d, &(0x7f00000000c0)={0x0, 0x25e2, 0x1, 0x0, 0xe, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x28, 0xa, 0x101, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c, 0x800) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) r7 = accept4$inet6(r6, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000480)=0x1c, 0x80000) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r3, r0, r0, r3, r0, r4, r1], 0x7) 17:32:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 6) 17:32:06 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) 17:32:06 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x2, r0) 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xb00, 0x0, 0x0, &(0x7f0000000000)) 17:32:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 7) [ 3022.636580][T26513] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3022.644603][T26513] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.652570][T26513] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3022.660540][T26513] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:06 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) getpriority(0x1, r1) pidfd_open(r0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x3aa) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x20, 0x8}, @mss={0x2, 0x987}, @window={0x3, 0x7, 0x3}], 0x4) 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xc00, 0x0, 0x0, &(0x7f0000000000)) [ 3022.763353][T26538] FAULT_INJECTION: forcing a failure. [ 3022.763353][T26538] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.776054][T26538] CPU: 1 PID: 26538 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3022.784813][T26538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3022.794888][T26538] Call Trace: [ 3022.798250][T26538] dump_stack_lvl+0xd6/0x122 [ 3022.802923][T26538] dump_stack+0x11/0x1b [ 3022.807142][T26538] should_fail+0x23c/0x250 [ 3022.811559][T26538] ? kcalloc+0x32/0x40 [ 3022.815666][T26538] __should_failslab+0x81/0x90 [ 3022.820499][T26538] should_failslab+0x5/0x20 [ 3022.825065][T26538] __kmalloc+0x6f/0x350 [ 3022.829258][T26538] ? io_rsrc_data_alloc+0x298/0x3e0 [ 3022.834522][T26538] kcalloc+0x32/0x40 [ 3022.838455][T26538] io_sqe_buffers_register+0x180/0x920 [ 3022.843916][T26538] ? __fget_light+0x21b/0x260 [ 3022.848646][T26538] __do_sys_io_uring_register+0x513/0x21a0 [ 3022.854489][T26538] ? fput+0x2d/0x130 [ 3022.858379][T26538] ? ksys_write+0x162/0x190 [ 3022.862872][T26538] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3022.868927][T26538] __x64_sys_io_uring_register+0x4f/0x60 [ 3022.874557][T26538] do_syscall_64+0x44/0xa0 [ 3022.878977][T26538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3022.884875][T26538] RIP: 0033:0x7f610f709709 [ 3022.889281][T26538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:06 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x456b, &(0x7f0000000040)={0x0, 0xd565, 0x20, 0x3, 0x33b, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "2006bdbe511571eb", "209225f366138d879d7b831a2a2ae377", "e48cc8dd", "a820dc340d5631af"}, 0xffffffffffffffc1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000140)=[r2]}, 0x1) 17:32:06 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@ipv4}, &(0x7f0000000140)=0x14) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0xfff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) 17:32:06 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000000, 0x80010, r0, 0x10000000) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x1, 0x10, "c4ab9130071500e6db5571b6c91c771c895b832e8194659771a3b1fa2cd5827f6afc4c5c00230ebefb1a3a3b38e99af3b1536a2590ba9718cf5b1fb9feb2d1e3", "d15dcff77a7bc5dbba8d457e67d7f602d1e4d4df50459e313e2dda50341f5af3", [0xffff, 0x6]}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0xff, "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"}, &(0x7f00000002c0)=0x123) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_enter(r1, 0x4092, 0x3, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xd00, 0x0, 0x0, &(0x7f0000000000)) 17:32:06 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) [ 3022.908967][T26538] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3022.917432][T26538] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3022.925396][T26538] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3022.933360][T26538] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.941323][T26538] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3022.949306][T26538] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:06 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x49010, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7) 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xe00, 0x0, 0x0, &(0x7f0000000000)) 17:32:06 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 8) 17:32:06 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdb7f, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0xc853}, 0x20000094) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x80010, 0xffffffffffffffff, 0x80000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xbc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x882b5143a4994596}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4800) [ 3023.037951][T26562] FAULT_INJECTION: forcing a failure. [ 3023.037951][T26562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3023.051028][T26562] CPU: 1 PID: 26562 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3023.059790][T26562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3023.069869][T26562] Call Trace: [ 3023.073140][T26562] dump_stack_lvl+0xd6/0x122 [ 3023.077727][T26562] dump_stack+0x11/0x1b [ 3023.081878][T26562] should_fail+0x23c/0x250 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf00, 0x0, 0x0, &(0x7f0000000000)) [ 3023.086307][T26562] should_fail_usercopy+0x16/0x20 [ 3023.091327][T26562] _copy_from_user+0x1c/0xd0 [ 3023.095910][T26562] io_sqe_buffers_register+0x219/0x920 [ 3023.101509][T26562] __do_sys_io_uring_register+0x513/0x21a0 [ 3023.107323][T26562] ? fput+0x2d/0x130 [ 3023.111215][T26562] ? ksys_write+0x162/0x190 [ 3023.115713][T26562] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3023.121773][T26562] __x64_sys_io_uring_register+0x4f/0x60 [ 3023.127413][T26562] do_syscall_64+0x44/0xa0 [ 3023.131829][T26562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3023.137752][T26562] RIP: 0033:0x7f610f709709 [ 3023.142159][T26562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3023.161761][T26562] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3023.170171][T26562] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3023.178135][T26562] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 17:32:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1100, 0x0, 0x0, &(0x7f0000000000)) 17:32:06 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) wait4(r1, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) waitid(0x2, r2, &(0x7f0000000080), 0x4, &(0x7f0000000300)) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) [ 3023.186099][T26562] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3023.194067][T26562] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 [ 3023.202497][T26562] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 9) 17:32:06 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x80, 0xffffffff, 0x0, 'queue0\x00', 0x100}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:06 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) keyctl$session_to_parent(0x12) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@gcm_128={{0x304}, "39994eb8ab215dc4", "bfe07b9a1d7dfc6542426c81d2c11168", "1be75a34", "b6123f486400b362"}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) [ 3023.318515][T26590] FAULT_INJECTION: forcing a failure. [ 3023.318515][T26590] name failslab, interval 1, probability 0, space 0, times 0 [ 3023.331205][T26590] CPU: 0 PID: 26590 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3023.339973][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3023.350096][T26590] Call Trace: [ 3023.353374][T26590] dump_stack_lvl+0xd6/0x122 [ 3023.357984][T26590] dump_stack+0x11/0x1b [ 3023.362139][T26590] should_fail+0x23c/0x250 [ 3023.366549][T26590] __should_failslab+0x81/0x90 [ 3023.371363][T26590] should_failslab+0x5/0x20 [ 3023.375865][T26590] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 3023.381663][T26590] ? __kmalloc_node+0x30/0x40 [ 3023.386413][T26590] __kmalloc_node+0x30/0x40 [ 3023.390913][T26590] kvmalloc_node+0x81/0x110 [ 3023.395448][T26590] io_sqe_buffer_register+0xae/0xbb0 [ 3023.400797][T26590] ? should_fail+0xd6/0x250 [ 3023.405326][T26590] ? should_fail+0xd6/0x250 [ 3023.409826][T26590] io_sqe_buffers_register+0x37c/0x920 17:32:07 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 17:32:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1200, 0x0, 0x0, &(0x7f0000000000)) 17:32:07 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x110, 0xffffffffffffffff, 0x8000000) 17:32:07 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) [ 3023.415288][T26590] __do_sys_io_uring_register+0x513/0x21a0 [ 3023.421129][T26590] ? fput+0x2d/0x130 [ 3023.425095][T26590] ? ksys_write+0x162/0x190 [ 3023.429597][T26590] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3023.435921][T26590] __x64_sys_io_uring_register+0x4f/0x60 [ 3023.441602][T26590] do_syscall_64+0x44/0xa0 [ 3023.446018][T26590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3023.451934][T26590] RIP: 0033:0x7f610f709709 [ 3023.456364][T26590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3023.475987][T26590] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3023.484390][T26590] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3023.492356][T26590] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3023.500320][T26590] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3023.508301][T26590] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000001 17:32:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2000, 0x0, 0x0, &(0x7f0000000000)) [ 3023.516450][T26590] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:07 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x70d00, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x840081, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000000c0)={0xf, 0x80, 0x9, 0x2, 0x2, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x543a, 0x2, @perf_config_ext={0x3f, 0x63}, 0x8022, 0xfff, 0x2, 0x0, 0x3, 0x1, 0x7, 0x0, 0xb1, 0x0, 0xb4c}, r2, 0x3, r3, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r1, 0x1) 17:32:07 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x8, 0x0, 0x10a}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:07 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) io_uring_enter(r0, 0x7ef3, 0xe4ef, 0x1, &(0x7f0000000040)={[0x81]}, 0x8) 17:32:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:07 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) getpriority(0x1, r0) wait4(r1, &(0x7f0000000000), 0x20000000, 0x0) 17:32:07 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) 17:32:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2d00, 0x0, 0x0, &(0x7f0000000000)) 17:32:07 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 10) 17:32:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x40, 0xff, {{0x3e, 0x4, 0x0, 0x1c, 0xf8, 0x66, 0x0, 0x80, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x11, [@remote, @empty, @local, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x94, 0x1, 0x9, [{@broadcast, 0x582}, {@multicast1, 0x80}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@broadcast, 0x3}, {@loopback, 0x8}, {@broadcast, 0x6}, {@loopback, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0xad, 0x1, 0xf, [{@broadcast}, {@multicast2, 0x7ff}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x13, 0x6c, [@dev={0xac, 0x14, 0x14, 0xb}, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @empty]}, @lsrr={0x83, 0x1b, 0xd0, [@broadcast, @empty, @private=0xa010100, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}]}, @timestamp={0x44, 0x28, 0x77, 0x0, 0x8, [0x0, 0x9, 0x24d, 0x7, 0x1f, 0x7, 0x10000, 0x8, 0x8]}, @lsrr={0x83, 0xf, 0x75, [@private=0xa010102, @loopback, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) [ 3024.198015][T26639] FAULT_INJECTION: forcing a failure. [ 3024.198015][T26639] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.210726][T26639] CPU: 1 PID: 26639 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3024.219487][T26639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3024.229609][T26639] Call Trace: [ 3024.232884][T26639] dump_stack_lvl+0xd6/0x122 [ 3024.237484][T26639] dump_stack+0x11/0x1b [ 3024.241636][T26639] should_fail+0x23c/0x250 [ 3024.246051][T26639] __should_failslab+0x81/0x90 [ 3024.250839][T26639] should_failslab+0x5/0x20 [ 3024.255360][T26639] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 3024.261079][T26639] ? __kmalloc_node+0x30/0x40 [ 3024.265782][T26639] __kmalloc_node+0x30/0x40 [ 3024.270275][T26639] kvmalloc_node+0x81/0x110 [ 3024.274780][T26639] io_sqe_buffer_register+0xcc/0xbb0 [ 3024.280071][T26639] ? should_fail+0xd6/0x250 [ 3024.284575][T26639] ? should_fail+0xd6/0x250 [ 3024.289090][T26639] io_sqe_buffers_register+0x37c/0x920 17:32:07 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:07 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000080)={0x0, 0x458a, 0x4, 0xffffffff}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x140030, r0, 0x8000000) 17:32:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4000, 0x0, 0x0, &(0x7f0000000000)) 17:32:07 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x65af, &(0x7f00000001c0)={0x0, 0x8e40, 0x2, 0x3, 0x198, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x10000000) r2 = syz_io_uring_setup(0x5d26, &(0x7f00000000c0)={0x0, 0x531a, 0x20, 0x3, 0x23a, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000180), 0x1) [ 3024.294551][T26639] __do_sys_io_uring_register+0x513/0x21a0 [ 3024.300480][T26639] ? fput+0x2d/0x130 [ 3024.304372][T26639] ? ksys_write+0x162/0x190 [ 3024.308870][T26639] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3024.314999][T26639] __x64_sys_io_uring_register+0x4f/0x60 [ 3024.320694][T26639] do_syscall_64+0x44/0xa0 [ 3024.325113][T26639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3024.331069][T26639] RIP: 0033:0x7f610f709709 [ 3024.335508][T26639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.355165][T26639] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3024.363576][T26639] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3024.371544][T26639] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3024.379518][T26639] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.387486][T26639] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000002 [ 3024.395452][T26639] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:08 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x9) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x4, 0x2, 0x7}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000140)={'\x00', 0x1, 0x0, 0x1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4800, 0x0, 0x0, &(0x7f0000000000)) 17:32:08 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2b, 0x9, 0x3, 0xdf, 0xb4, @private0, @loopback, 0x7800, 0x86}}) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r2, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf0024f}], 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x10, 0x7, 0x7, 0x6, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x66, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@noop]}}}}}) 17:32:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4c00, 0x0, 0x0, &(0x7f0000000000)) 17:32:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 11) 17:32:08 executing program 3: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3ec, 0x13, 0x200, 0x70bd25, 0x25dfdbfb, {0x27, 0x58, 0x2, 0x5f, {0x4e21, 0x4e22, [0x1, 0x0, 0x2, 0x1f], [0x3, 0x1000, 0x0, 0x20], 0x0, [0x8, 0xde]}, 0xa36, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "674fe8a9cad6e98d5202a25b15201630b7701c94c7b56d7226d7c6f049e4e47a7cba0128e7d417873b643828c101cf30195887b7b2c95551310e5db909a0ccadca29661d256ffd329e9a0fc2ae81e774b21c4eeb1ff692ced31126c95e52ececcbfade7b4c93065c2255894199ab5efc8c62c1c74cdeee8868cb91b7b19085759f997cbd5af14bb3fba70b7ef55c1c1164354fecfd344049f338c39aa4e189cb8c8f4cf5ff175902c0edca62c6ba5cb9e857892a48f28ea749dcd03daba52df23bedc58726cadf1b45adc32ade8c48c7c53b88"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "7029b614f2fb5822b13560029310ad06ff65de1411cde9147d35dc924928d52bfef23dcb303101709fdb0b42048d512b34e1a8c8960fdbfcce9a0fefc9bec5158d67c396557414e09297b7d5a8bbdc832e4a8da1a82fa2c263d82fde99d7d50e77dfea2308b6a90a306ceeb3fc38bbe3140b64c4d1953cd79c7087"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "1940806b4122002ce6dc4dead373051dcad552b978853e0fea20cb8104705981bc76864655e4e3c205b0c47a5bb7865c8eba8cb0139304614cc147dd4e67e50f928d3bb3c6e11518e138b363b8ab11d67df40c70994d934afb4b052e01"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "a9d3f879d521e64d8058cea648c050488b771f6b1d61444a4c07bc2e4f08d7ae291cadcc3d3d5ba19bd7c47f5352d0bd1f8070990277ece6867adc"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "59b50c9662e34d4f6209844d12ceb9ee0371628f93f85412d014b56032439718ca99b6ad7e8579726e4696391faf9433c233539e80daf30b656f2cbae4fe9c20f910f07c1238f3488f091cff9d399400ddcd7d95a0b7bf15c810a06010da9fb9a5fd8bc0463a5d3ef9cc02f4b82f61969cf8931dc0ae92bb5cf94acc0d13ba3733f53f4038d1f4e20940d491aa7d7756776e3d6b79b77a1acc8dc5e416975a595ddebd6a7f72314410ed01f4d1410f222779fe6304002e46318cbc389fdb46f95c654871c648"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "a7dfd299a55f5b3b9c6dc53b09c09937ff71e0ce0016b9e8dabc3696ff026439cdfe34ca3b80e21b293a90e2e4cafc43eef6b147eb0c00e5f776043f893ac96a13515ee37f420c96c1abd5dcf6ace6558bbe73e6e03e5e2816b9c2332e16c1798a10cfdfe090d53fc331fd7157eab6bfef33a28f8be5e489fe826e04b96b6f9298f80f690a0e8e2659a5811b1ebb070f3c686ac6014d6d59a0e2bb4c66f4458109d970ae95a1cb26cf36041c040f5969b74f85d6ab7d8b2ad496574d97e0279559afbce9d9f658186f166accb817b8b47b"}]}, 0x3ec}}, 0x4814) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6800, 0x0, 0x0, &(0x7f0000000000)) 17:32:08 executing program 5: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x8cc9, 0x0, 0x100, 0x0, 0x0, r0}) keyctl$session_to_parent(0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x10000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x8040) r3 = syz_io_uring_setup(0x1a7, &(0x7f0000000180)={0x0, 0x613b, 0x2, 0x1, 0x39, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x2237, &(0x7f0000000280)={0x0, 0x98ee, 0x8, 0x1, 0x153, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000300), &(0x7f0000000440)) [ 3024.597775][T26673] FAULT_INJECTION: forcing a failure. [ 3024.597775][T26673] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.610539][T26673] CPU: 0 PID: 26673 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3024.619302][T26673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3024.629353][T26673] Call Trace: [ 3024.632627][T26673] dump_stack_lvl+0xd6/0x122 [ 3024.637220][T26673] dump_stack+0x11/0x1b [ 3024.641375][T26673] should_fail+0x23c/0x250 [ 3024.645787][T26673] __should_failslab+0x81/0x90 [ 3024.650544][T26673] should_failslab+0x5/0x20 [ 3024.655042][T26673] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 3024.660874][T26673] ? __kmalloc_node+0x30/0x40 [ 3024.665541][T26673] __kmalloc_node+0x30/0x40 [ 3024.670041][T26673] kvmalloc_node+0x81/0x110 [ 3024.674538][T26673] io_sqe_buffer_register+0xf8/0xbb0 [ 3024.679914][T26673] ? should_fail+0xd6/0x250 [ 3024.684421][T26673] ? should_fail+0xd6/0x250 [ 3024.688913][T26673] io_sqe_buffers_register+0x37c/0x920 [ 3024.694370][T26673] __do_sys_io_uring_register+0x513/0x21a0 [ 3024.700176][T26673] __x64_sys_io_uring_register+0x4f/0x60 [ 3024.705878][T26673] do_syscall_64+0x44/0xa0 [ 3024.710293][T26673] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3024.716261][T26673] RIP: 0033:0x7f610f709709 [ 3024.720667][T26673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.740333][T26673] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3024.748747][T26673] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3024.756754][T26673] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 3024.764724][T26673] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3024.772702][T26673] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000002 [ 3024.780708][T26673] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) pidfd_open(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x6931, 0x20e5b6572167f1a8) ioctl$LOOP_CLR_FD(r2, 0x4c01) 17:32:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6c00, 0x0, 0x0, &(0x7f0000000000)) 17:32:08 executing program 3: perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) 17:32:08 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) 17:32:08 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = io_uring_setup(0xaab, &(0x7f00000000c0)={0x0, 0x9d2d, 0x4, 0x2, 0x123, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r1, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) 17:32:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 12) [ 3025.160256][T26691] FAULT_INJECTION: forcing a failure. [ 3025.160256][T26691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3025.173332][T26691] CPU: 0 PID: 26691 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3025.182093][T26691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3025.192147][T26691] Call Trace: [ 3025.195419][T26691] dump_stack_lvl+0xd6/0x122 [ 3025.200012][T26691] dump_stack+0x11/0x1b [ 3025.204243][T26691] should_fail+0x23c/0x250 [ 3025.208688][T26691] should_fail_usercopy+0x16/0x20 [ 3025.213706][T26691] _copy_from_user+0x1c/0xd0 [ 3025.218296][T26691] io_sqe_buffers_register+0x219/0x920 [ 3025.223759][T26691] __do_sys_io_uring_register+0x513/0x21a0 [ 3025.229560][T26691] ? fput+0x2d/0x130 [ 3025.233452][T26691] ? ksys_write+0x162/0x190 [ 3025.238019][T26691] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3025.244079][T26691] __x64_sys_io_uring_register+0x4f/0x60 [ 3025.249762][T26691] do_syscall_64+0x44/0xa0 [ 3025.254185][T26691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3025.260077][T26691] RIP: 0033:0x7f610f709709 [ 3025.264484][T26691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.284086][T26691] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3025.292633][T26691] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3025.300880][T26691] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 17:32:08 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) r1 = io_uring_setup(0x1382, &(0x7f00000000c0)={0x0, 0x367f, 0x2, 0x3, 0x2ac, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x10000000) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r2, 0x10000000) [ 3025.308909][T26691] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.317062][T26691] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000002 [ 3025.325025][T26691] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7400, 0x0, 0x0, &(0x7f0000000000)) 17:32:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 13) 17:32:09 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1, 0x10}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) 17:32:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x301140) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x8000000}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0xfffc, r1, 0x8000000) 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7a00, 0x0, 0x0, &(0x7f0000000000)) 17:32:09 executing program 2: getpgrp(0xffffffffffffffff) r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, r0) 17:32:09 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/74, 0x4a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8004, 0x0, 0x0, &(0x7f0000000000)) [ 3025.445704][T26715] FAULT_INJECTION: forcing a failure. [ 3025.445704][T26715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3025.458795][T26715] CPU: 0 PID: 26715 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3025.467560][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3025.477644][T26715] Call Trace: [ 3025.480919][T26715] dump_stack_lvl+0xd6/0x122 [ 3025.485594][T26715] dump_stack+0x11/0x1b [ 3025.489748][T26715] should_fail+0x23c/0x250 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xcc02, 0x0, 0x0, &(0x7f0000000000)) 17:32:09 executing program 5: r0 = io_uring_setup(0x26, &(0x7f0000000040)={0x0, 0xd7f1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) io_uring_setup(0x37fd, &(0x7f00000000c0)={0x0, 0x354d, 0x0, 0x3, 0x2ac, 0x0, r0}) [ 3025.494160][T26715] should_fail_usercopy+0x16/0x20 [ 3025.499180][T26715] _copy_from_user+0x1c/0xd0 [ 3025.503820][T26715] io_sqe_buffers_register+0x219/0x920 [ 3025.509325][T26715] __do_sys_io_uring_register+0x513/0x21a0 [ 3025.515176][T26715] ? fput+0x2d/0x130 [ 3025.519185][T26715] ? ksys_write+0x162/0x190 [ 3025.523702][T26715] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3025.529767][T26715] __x64_sys_io_uring_register+0x4f/0x60 [ 3025.535412][T26715] do_syscall_64+0x44/0xa0 [ 3025.539838][T26715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3025.545806][T26715] RIP: 0033:0x7f610f709709 [ 3025.550287][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3025.569933][T26715] RSP: 002b:00007f610d481188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3025.578346][T26715] RAX: ffffffffffffffda RBX: 00007f610f80df60 RCX: 00007f610f709709 [ 3025.586328][T26715] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000003 17:32:09 executing program 5: r0 = io_uring_setup(0x26, &(0x7f00000000c0)={0x0, 0xd7f3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000), 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_setup(0x7c4, &(0x7f0000000140)={0x0, 0xbb5d, 0x4, 0x2, 0x3ae, 0x0, r2}) r3 = eventfd2(0x1, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r3, 0x1) 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x200000, 0x0, 0x0, &(0x7f0000000000)) [ 3025.594296][T26715] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.602270][T26715] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000002 [ 3025.610751][T26715] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:09 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) (fail_nth: 14) 17:32:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "537c06c017a140cc", "b4a878a12d8e246b1394ee9d18d0612a", "12598ddb", "fea4ef22f6e4f43b"}, 0x28) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:09 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1c, 0x1010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x0) [ 3025.697749][T26744] FAULT_INJECTION: forcing a failure. [ 3025.697749][T26744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3025.710815][T26744] CPU: 0 PID: 26744 Comm: syz-executor.1 Not tainted 5.15.0-rc3-syzkaller #0 [ 3025.719620][T26744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3025.729670][T26744] Call Trace: [ 3025.732944][T26744] dump_stack_lvl+0xd6/0x122 [ 3025.737550][T26744] dump_stack+0x11/0x1b [ 3025.741706][T26744] should_fail+0x23c/0x250 [ 3025.746116][T26744] should_fail_usercopy+0x16/0x20 [ 3025.751131][T26744] _copy_to_user+0x1c/0x90 [ 3025.755575][T26744] simple_read_from_buffer+0xab/0x120 [ 3025.760955][T26744] proc_fail_nth_read+0x10d/0x150 [ 3025.766025][T26744] ? proc_fault_inject_write+0x230/0x230 [ 3025.771805][T26744] vfs_read+0x1e6/0x750 [ 3025.775977][T26744] ? __fget_light+0x21b/0x260 [ 3025.780672][T26744] ? __cond_resched+0x11/0x40 [ 3025.785372][T26744] ksys_read+0xd9/0x190 [ 3025.789546][T26744] __x64_sys_read+0x3e/0x50 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2000000, 0x0, 0x0, &(0x7f0000000000)) [ 3025.794043][T26744] do_syscall_64+0x44/0xa0 [ 3025.798456][T26744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3025.804365][T26744] RIP: 0033:0x7f610f6bc48c [ 3025.808795][T26744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3025.828663][T26744] RSP: 002b:00007f610d481170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3025.837068][T26744] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f610f6bc48c [ 3025.845038][T26744] RDX: 000000000000000f RSI: 00007f610d4811e0 RDI: 0000000000000004 [ 3025.853003][T26744] RBP: 00007f610d4811d0 R08: 0000000000000000 R09: 0000000000000000 [ 3025.860995][T26744] R10: 1000000000000376 R11: 0000000000000246 R12: 0000000000000002 [ 3025.868990][T26744] R13: 00007fff459ea45f R14: 00007f610d481300 R15: 0000000000022000 17:32:09 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = getpgrp(r0) getpgrp(r1) 17:32:09 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 17:32:09 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/46, 0x2e}, {0x0}, {&(0x7f0000000180)}], 0x3) 17:32:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x3000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:09 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:09 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x5, 0x7, 0x1f, 0x0, 0x1e, 0x380, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x200, 0x77c0}, 0x3a47aa7ed09c109f, 0x6900, 0x2, 0x2, 0x5, 0xcad3, 0x0, 0x0, 0x9, 0x0, 0x1ff}, r1, 0x7, 0xffffffffffffffff, 0x1) getpriority(0x1, r1) 17:32:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0x22af, &(0x7f0000000000)={0x0, 0x8f51, 0x2, 0x0, 0x109, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r1, 0x10000000) 17:32:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:10 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() getpriority(0x1, r1) getpriority(0x1, r0) 17:32:10 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000040)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x30, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = eventfd2(0x3, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) 17:32:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x5000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x8000000) 17:32:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:10 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:10 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x1f, 0x2, 0x1}) getpriority(0x1, r0) 17:32:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:10 executing program 3: syz_io_uring_setup(0x29b4, &(0x7f0000000000)={0x0, 0x127d, 0x4, 0x2, 0x107}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) 17:32:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:10 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_io_uring_setup(0x246f, &(0x7f0000000080)={0x0, 0x7517, 0x20, 0x1, 0x128}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x36fe, &(0x7f0000000180)={0x0, 0xa85f, 0x8, 0x3, 0x4, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) 17:32:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x8000000) 17:32:10 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x7, 0x6b, 0x40, 0x0, 0x7, 0x400, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x15acda4b, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x4461, 0x5, 0x538a23bc, 0x0, 0x3, 0x7, 0x8, 0x0, 0xfffffffc, 0x0, 0x3}, r0, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2ce) getpriority(0x1, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x9, 0x25, 0x0, 0xb5, 0x9105, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x8000, 0x80000001, 0x10001, 0x1, 0x6, 0x10000, 0x4, 0x0, 0xd997, 0x0, 0x7}, r2, 0xc, r1, 0x9) 17:32:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e20, 0xffff8170, @private0, 0x101}, {0xa, 0x4e24, 0x6, @mcast2, 0xe6}, 0x4, [0xfffffffe, 0xffff, 0x401, 0xffff, 0x6, 0x7fffffff, 0x7, 0x2]}, 0x5c) 17:32:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:10 executing program 2: r0 = getpgrp(0xffffffffffffffff) pidfd_open(0x0, 0x0) getpriority(0x1, r0) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1, 0x650080) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x7}) getpgrp(r0) r2 = fork() getpgrp(r0) wait4(r2, 0x0, 0x2, 0x0) getpriority(0x1, r2) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000080)={&(0x7f00000000c0)="17b3f70974e4f4c282f8cf67fd8af3871df77380ee44282684bf9c83a66e746752996f1fa9de376610ecf18ba850fe7a7e5cbcf0faa9ccda9d4b3fab52166e7e99b0c9de59fa0923d6207e462008f60db5f7ae2c8434a289469c71a64ec9c1ea00124fb36f936f454b116722838613703808249a335e1a0705", 0x79}) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400b8202}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = fork() ptrace$setregset(0x4205, r3, 0xfb77a57a9e2a7634, &(0x7f0000000240)={&(0x7f00000001c0)="6681b720bbdb986b0d628ae59e4ada0724e82584ce071cfcafbbf6abb363d9d25f2847bf60bf20a00352697a240f18daa45e5818efdc9da1608c8245dcb19ee31019a6d51a5c4ad885c90497c6c6089ea3d1", 0x52}) 17:32:11 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x9000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:11 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x140030, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x7ece, &(0x7f0000000180)={0x0, 0x1c52, 0x2, 0x3, 0xd2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r0 = io_uring_setup(0x31af, &(0x7f0000000000)={0x0, 0x5028, 0x20, 0x2, 0x38b}) syz_io_uring_setup(0x59cf, &(0x7f0000000080)={0x0, 0x272, 0x4, 0x2, 0x375, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 17:32:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:11 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x4, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1b) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x9, 0x4}, 0x14) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xa000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xb000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:11 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) (fail_nth: 1) 17:32:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3028.233683][T26878] FAULT_INJECTION: forcing a failure. [ 3028.233683][T26878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3028.246867][T26878] CPU: 1 PID: 26878 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3028.255624][T26878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3028.265674][T26878] Call Trace: [ 3028.268955][T26878] dump_stack_lvl+0xd6/0x122 [ 3028.273616][T26878] dump_stack+0x11/0x1b [ 3028.277844][T26878] should_fail+0x23c/0x250 17:32:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xc000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3028.282260][T26878] should_fail_usercopy+0x16/0x20 [ 3028.287290][T26878] _copy_to_user+0x1c/0x90 [ 3028.291707][T26878] simple_read_from_buffer+0xab/0x120 [ 3028.297146][T26878] proc_fail_nth_read+0x10d/0x150 [ 3028.302183][T26878] ? proc_fault_inject_write+0x230/0x230 [ 3028.307840][T26878] vfs_read+0x1e6/0x750 [ 3028.312055][T26878] ? ipc_obtain_object_check+0x5d/0xb0 [ 3028.317556][T26878] ? __fget_light+0x21b/0x260 [ 3028.322230][T26878] ? __cond_resched+0x11/0x40 [ 3028.326902][T26878] ksys_read+0xd9/0x190 [ 3028.331104][T26878] __x64_sys_read+0x3e/0x50 [ 3028.335610][T26878] do_syscall_64+0x44/0xa0 [ 3028.340030][T26878] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3028.345997][T26878] RIP: 0033:0x7f45a410b48c [ 3028.350400][T26878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3028.370106][T26878] RSP: 002b:00007f45a1ed0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 17:32:12 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) [ 3028.378514][T26878] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f45a410b48c [ 3028.386495][T26878] RDX: 000000000000000f RSI: 00007f45a1ed01e0 RDI: 0000000000000003 [ 3028.394468][T26878] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3028.402432][T26878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3028.410424][T26878] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:32:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xd000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:12 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) r2 = getpgrp(r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(r2) getpriority(0x1, r3) 17:32:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:12 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQES(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000008, 0x80010, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:12 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5002) 17:32:12 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:12 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) getpriority(0x1, r1) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xcd, 0x3, 0x1f, 0xff, 0x0, 0x3, 0x8, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x7, 0x8}, 0x40, 0x8, 0x7, 0x0, 0x3, 0x6, 0x2, 0x0, 0x7ff, 0x0, 0x1}, r2, 0x1, r3, 0x13) 17:32:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xe000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:12 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x1f, 0x0, 0x5}) 17:32:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:12 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:13 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0xffff, 0x0, &(0x7f0000000240)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x6) r2 = syz_io_uring_setup(0x8000, &(0x7f0000000340)={0x0, 0xca83, 0x8, 0x40000, 0x67}, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000640)={0x9}) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) r4 = getpgrp(0x0) ptrace$setregset(0x4205, r4, 0x3, &(0x7f00000001c0)={&(0x7f0000000180)="154c26ce1c0e55136d1da77b7e7aacb27a11d97e6538c3b1", 0x18}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}) wait4(r3, &(0x7f0000000040), 0x1000000, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x35}) 17:32:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x10000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:13 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x1000) 17:32:13 executing program 2: r0 = getpgrp(0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x11000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:13 executing program 3: r0 = shmget(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7800) 17:32:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x12000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:13 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) pidfd_open(r0, 0x0) 17:32:14 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2d000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:14 executing program 3: sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdadf25150000003c0020800800010003000000050002000200000005000200030000000c000500030000000000000005000200010000000c000500030000000000000008001f000100000008000300", @ANYRES32=0x0, @ANYBLOB="080025001e000080ef3ef42ff966d15af5d43ef6d673c310055d3205c6d17b104ec754daeeebf2bc6a112829ce355bbaaf593b1ffdce8c52b4f56506aed675a5b3b9b1c36cb8963b651923bf6379317d3605a4fbc38d8fab301581632a409e4d40f51449fc236e45286f7fe10e72e46f43c5076839c15f432d73f24416383f72f262c3f0c6dbd386555b9e7c670780252c948fe8526cb9b4961747c2161932646f74744b96295b39685abc7a12198abf37c7d352fa2298ab1102b03a5d001e6715424af26f54dba533805e61"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x85) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:14 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x4c}}, 0x24000800) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) r2 = fork() wait4(r2, 0x0, 0x4, 0x0) getpriority(0x1, 0x0) 17:32:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:14 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) r2 = io_uring_setup(0x10ad, &(0x7f0000000040)={0x0, 0x6eef, 0x4, 0x0, 0x267, 0x0, r0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x9, 0x66, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x5, 0x8}}) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000500)={@empty, r5}, 0x14) r6 = io_uring_setup(0x523, &(0x7f0000000180)={0x0, 0xce73, 0x8, 0x0, 0x1fa, 0x0, r3}) socketpair(0x4, 0x1, 0x81, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = accept$inet6(r3, &(0x7f0000000700)={0xa, 0x0, 0x0, @local}, &(0x7f0000000740)=0x1c) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000007c0)=[r7, r6, r8, r0], 0x4) io_uring_setup(0x611e, &(0x7f0000000100)={0x0, 0x773, 0x10, 0x201, 0x1a}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) socket(0x23, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x29, 0x1, 0x8, 0x1, 0x2, @remote, @loopback, 0x80, 0x20, 0x4, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="67726574617030000000000000000000b67e64efc340ce3bbc9b1261", @ANYRES32=r9, @ANYBLOB="00000001000000013800000245300014006800007f049078ac1414bbffffffff"]}) 17:32:14 executing program 3: ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0xffff, 0x7, 0x0, 'queue0\x00', 0x4}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x40000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:14 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:32:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) 17:32:14 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) 17:32:15 executing program 5: r0 = fork() r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x48000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000040)={'\x00', 0x10001, 0x3, 0x2}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) getpgrp(0xffffffffffffffff) 17:32:15 executing program 4: r0 = io_uring_setup(0x37ba, &(0x7f0000000040)={0x0, 0x6f26, 0x2, 0x3, 0xec}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) syz_io_uring_setup(0x51b2, &(0x7f00000000c0)={0x0, 0xce23, 0x1, 0x1, 0x1f, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 17:32:15 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x5000) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4c000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 5: r0 = getpgrp(0x0) getpriority(0x1, r0) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000080)={&(0x7f0000000000)="aa3fc5ab4d5c1c145a3ce198c7167bd1e0b66e7cc061f110430052cd799e266fab5bb37059cc673d4de28eb34b1d5212302fa16f2251c2f4920ba63f0b929644c780c8bba9951fc98642169529994fcf6a83c64759df6700279d79ba29239805e56028da9c3bb78eeda7d78ef02f861327f7d781f4cb0731ba2521eaa3b8c43d", 0x80}) getpriority(0x1, r0) 17:32:15 executing program 3: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x2000) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x132, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x68000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 5: r0 = getpgrp(0x0) getpriority(0x1, r0) 17:32:15 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) fork() 17:32:15 executing program 3: r0 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) shmdt(r0) 17:32:15 executing program 4: r0 = syz_io_uring_setup(0x7b3d, &(0x7f0000000340)={0x0, 0x3, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:15 executing program 5: r0 = getpgrp(0x0) getpriority(0x1, r0) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6c000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) mmap$usbmon(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x50, 0xffffffffffffffff, 0x2) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x74000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 5: fork() r0 = getpgrp(0x0) getpriority(0x1, r0) 17:32:15 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x110, r0, 0x10001) 17:32:15 executing program 2: getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r0 = fork() getpriority(0x0, r0) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7a000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpgrp(r0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600), 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0xadc3, 0x0, 0x0, 0x19b}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x4000010, r1, 0x0) 17:32:15 executing program 5: fork() r0 = getpgrp(0x0) getpriority(0x0, r0) 17:32:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7}, "14cacb7a13fb09b8", "d6c3de11047757d4c7f3465723a28f4c", "d243d806", "df7fde22d69832e2"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80800) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x80040000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:15 executing program 5: fork() r0 = getpgrp(0x0) getpriority(0x0, r0) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xcc020000, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 5: fork() r0 = getpgrp(0x0) getpriority(0x0, r0) 17:32:15 executing program 4: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{0x6c, 0x9}, 'port1\x00', 0x0, 0x1000, 0x0, 0x1, 0x400, 0xfffffffb, 0x8001, 0x0, 0x0, 0x2}) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xfeffffff, 0x0, 0x0, &(0x7f0000000000)) 17:32:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:19 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) pidfd_open(r0, 0x0) r1 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000040)) 17:32:19 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xfffffffe, 0x0, 0x0, &(0x7f0000000000)) 17:32:19 executing program 5: fork() getpgrp(0x0) getpriority(0x1, 0x0) 17:32:19 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) 17:32:19 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) 17:32:19 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:19 executing program 5: fork() getpgrp(0x0) getpriority(0x1, 0x0) 17:32:19 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 17:32:19 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) r4 = fork() pidfd_open(r4, 0x0) getpriority(0x1, r3) 17:32:19 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x116}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000400)) r0 = io_uring_setup(0x6446, &(0x7f00000000c0)={0x0, 0x32c1, 0x0, 0x0, 0x31d}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180)}], 0x3) 17:32:19 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x20000000000000, 0x0, 0x0, &(0x7f0000000000)) [ 3036.923824][T27359] cgroup: Unknown subsys name 'perf_event' [ 3036.929975][T27359] cgroup: Unknown subsys name 'net_cls' 17:32:21 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x40, 0x6, 0x20, @mcast1, @mcast2, 0x8, 0x7, 0x101, 0x3}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x12, 0x100, 0x70bd26, 0x25dfdbfc, {0x2c, 0x3, 0x5d, 0x6, {0x4e22, 0x4e21, [0x1, 0xe354, 0x6, 0x3], [0x9, 0x3f, 0xf52, 0x401], r0, [0x2, 0x2]}, 0x9, 0x81}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x100000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:21 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/29, 0x1d}, {0x0}, {&(0x7f0000000180)}], 0x3) 17:32:21 executing program 5: fork() getpgrp(0x0) getpriority(0x1, 0x0) 17:32:21 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:21 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = syz_io_uring_setup(0x4352, &(0x7f0000000080)={0x0, 0x308b, 0x8, 0x1, 0x60}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000180), 0x1) getpriority(0x1, r0) fork() r2 = getpgrp(r0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x64, 0x3, 0x40, 0x60, 0x0, 0x100000001, 0x98482, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1, 0x1, @perf_config_ext={0x4, 0x800}, 0x10, 0x7fffffff, 0x2, 0x1, 0x6, 0x80000001, 0xaa, 0x0, 0x32, 0x0, 0x4}, r2, 0xf, r3, 0x2) 17:32:21 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x10, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:21 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) r4 = fork() pidfd_open(r4, 0x0) getpriority(0x1, r3) 17:32:21 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x7f, 0x3, 0x0, 'queue1\x00', 0x5}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x200000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:21 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:21 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:21 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x1f, 0x81}, 'port1\x00', 0x1, 0x20000, 0xf1a9, 0x6, 0xef0a, 0x7, 0x19, 0x0, 0x6, 0x2}) 17:32:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x300000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:21 executing program 2: r0 = getpgrp(0xffffffffffffffff) syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getpriority(0x1, r0) 17:32:21 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:21 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) getpgrp(0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 17:32:22 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25ffdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000000) 17:32:22 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x400000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:22 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) r4 = fork() pidfd_open(r4, 0x0) getpriority(0x1, r3) 17:32:22 executing program 2: socketpair(0x15, 0x1, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3c4, 0x14, 0x2, 0x70bd29, 0x25dfdbfe, {0x23, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "7085bd074aad48cead476ca16d910cd849cc57621864de152d8547d277898360632bbedb81e4debe414c101e"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "63603b7d9d50a1fadabf7e70c155322fd1748a3c89ac52435fd8f0a6c337d9c04ec721a736c3239adb6b1e9c83ddd977999d95f8137fe8bc5ba0f1209d4b85982ba646d1cf36c9357d478157fe7a82dcf89d5af18af02348"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "57e9e5f7002173ca0434f046865e82ec64948ed83789e49fe585f65f29a4cd4414e54d1d7c66be44171579d489202c8c08bd35c94530323fdd4ed38da5fc8f7f287c4746b97e8175d235c2788dae28d6043f49ece9707ce5455daba877f45d17e61aca8d5872ae2ee7afeef34b50f404cd839636b9f5b83d6049838b739ec3a1955d2cd25380e838ba34f818491dccd0f14d1cd3396e4c66f1cae3c3d4ffb2874e62559ca0ca4aada46fbebe2b33deebd1e91aa55ab4c697b7b867d51df83865374fa0326cf736835b5d3d3b51dbc041464f9e0ac94f608ffbceaf84eae7e5fa9f4f18e1540c6cf6d387"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "60cc21d6d87bad0b41b451ffc3c505e4d44bcfb5734393008b7cce70b022ec020a8651e1053a7411c2755d808fa8bc2bccb1e047b7e26bad1d1a3f2137214d09a9136675040c12ea08be75f0f57259415efa71f503ddeb7578d6bdbd64238a30c2365360e8fc7c51b34a6344d7f2768f4ac5028c31aa73"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "d62ac7b54d8b0819fe5945bfc1c231e23b9142d028ff72a7a6623dcfba885fa809077eb9"}, @INET_DIAG_REQ_BYTECODE={0xfa, 0x1, "794f83d538ccf43e378e660d16c6a6778262a2e8ce82e18e97c7fd03779d78235b1daf427c8f2d5ff17afc5d1ef4594c59acf7764aba5f24a8ebf557eae0b5c5e3cbc7ffaacd5eb4090e9db1b76fa8648e1442a0260d6e4848265d2a9ac533cbad43e4a518c92612d3d0c32d5c5476cc4e051b74d070851a3813a5c05af1fdf0e544eb54bf16745ac5c3584d72883cfe97ac9ee07c1d128595a3654f753fca61536978ba3042d46cd2a1d5b9ad46d342dc1f8505f747f4eddb1e5698cbe68ece0fbe8a9f64103c0de119a82d54815cc68185a390e9a35adfdb23d89e3915164958aa242c169bf11a3fad026b086fd742705b39964c51"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "a3482e5b38882ffb008b479a9d7fc8ae11fc62e7f5ca4377d853f787428bbcdf0e4b60c2e0f975b1918b5be94ca60b0a0ca28ecd84322d7411331714ad97ada32f82e9e97d01ba0617c7aa6bc8ed8018c4e049c8992fa6562a70ea25bb0e5558f7067526c0f596ab7bf9ca6510e16f1d01a2d14ba811e3bceb6987111a0e83066df091c8a8ea5287b3d72d"}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r2 = getpgrp(0xffffffffffffffff) getpriority(0x1, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x98000, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x5, 0x3f, 0x90, 0x1f, 0x0, 0x9, 0x9080, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x4000, 0xe2bf, 0x9, 0x3, 0xffffffffffff3684, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6}, r2, 0xc, r3, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000780)=[r0, r0, r1, r4], 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000006c0)={0x1000, 0x0, &(0x7f0000000680)=[r1]}, 0x1) r5 = fork() wait4(r5, 0x0, 0x2, 0x0) waitid(0x1, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) fork() 17:32:22 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x701001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', r1, 0x40, 0x7, 0x1, 0x9685, {{0x3e, 0x4, 0x1, 0x1, 0xf8, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x7, [{@multicast1, 0x5}, {@broadcast, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0x87, 0x3, 0x4, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x8, [0x7fffffff, 0xdb, 0x100]}, @end, @lsrr={0x83, 0x23, 0x3f, [@dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}]}, @cipso={0x86, 0x23, 0x0, [{0xce14e60718b7fbba, 0x4, "af5b"}, {0x2, 0x10, "26976a960c88884e7d834eb7e808"}, {0x7, 0x9, "78a2c20ec9c655"}]}, @cipso={0x86, 0x1b, 0x0, [{0x5, 0x4, "7c95"}, {0x1, 0xc, "1ea8e82004ab502ec36f"}, {0x1, 0x5, "04a2bb"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xb0, 0x1, 0x9, [{@multicast2, 0x1}, {@empty, 0x401}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x10001}, {@private=0xa010101, 0x9}, {@multicast2, 0xfff}]}, @timestamp_addr={0x44, 0xc, 0xd9, 0x1, 0x2, [{@empty, 0x51b}]}]}}}}}) r2 = syz_io_uring_setup(0x2327, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000580)=r0, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000007c06d7aeecda5cd914a8424b76c651e8cdfee8a1a2df77f6339ca635c517874e33d145aced7a3c825a308ac75ff2c7a8a3a6e7cc37c1f26eceeb1bc5de4c83c5d3037ee55df0b5769881fea0b72a7fd1e62eb45baead5a44cef735c942c375c4ceaf020f5ae5a0326d7e965efa8f7e5f534608916706fb3f6e6a14d9693c0aba9a42614b34d6be3cd0e7d8661ac977ec904a4b8e131c684d13f03bb331e9fde9ea39886aeb23f9ae0c9b573658fde7d05dd215593cac676d9f5ea2", @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf250100000014000600766972745f776966693000000000000014000600677265300000000000000000000000000800050000000000080005007f00000108000400ac1e00012a00070073797374656d5f753a6f626a6563745f723a746d707265617065725f657865635f743a73300000002900070073797374656d5f753a6f626a6563745f723a6966636f6e6669675f657865635f743a7330000000002700070073797374656d5f753a6f626a6563745f723a64686370645f73746174655f743a73300000"], 0xd4}, 0x1, 0x0, 0x0, 0x24004000}, 0xc0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x600440, 0x0) read$ptp(r5, &(0x7f0000000640)=""/246, 0xf6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f00000005c0)) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004880) 17:32:22 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x500000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:22 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:22 executing program 4: r0 = syz_io_uring_setup(0x71b4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000, 0x1ec}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 17:32:22 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) r0 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0xe2) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r1, 0x0) 17:32:22 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x600000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:22 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000b, 0x11, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:22 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:22 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x700000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:22 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) 17:32:23 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) r4 = fork() pidfd_open(r4, 0x0) getpriority(0x1, r3) 17:32:23 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = getpgrp(r0) getpriority(0x0, r1) 17:32:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x800000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x440200) mmap$usbmon(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000003, 0x140090, r0, 0x7) 17:32:23 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:23 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x10d001, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdb004e22000008000b00", @ANYRES32=r1, @ANYBLOB="0400666ba1007dbd9161a305002c830000000180c0280000010000000000000000b02970997bcf00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x2004c800) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r3 = syz_io_uring_setup(0x263b, &(0x7f0000000180)={0x0, 0x7492, 0x2, 0x2, 0x17a, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[r2, r4, r5, r2, r2]}, 0x5) 17:32:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x900000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:23 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setfsuid(r2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8b, 0x9, 0x5, 0x6, 0x0, 0x59cc, 0x1, 0x13, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffd, 0x4, @perf_config_ext={0x8a}, 0xd4, 0x4, 0x3, 0x6, 0x7, 0x7fff, 0x81, 0x0, 0x1, 0x0, 0x7f}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r3 = getpgrp(r0) pidfd_open(r3, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x12) r4 = getpgrp(r1) getpriority(0x1, r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 17:32:23 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:23 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x3000) shmdt(r0) 17:32:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xa00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:23 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x0) 17:32:24 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) fork() getpriority(0x1, r3) 17:32:24 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = io_uring_setup(0x2867, &(0x7f0000000000)={0x0, 0x5444, 0x1, 0x3, 0x34a}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = io_uring_setup(0x497b, &(0x7f00000001c0)={0x0, 0x4176, 0x20, 0x2, 0xbd}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x110, r2, 0x8000000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="d9c6f92387858870aba94b2617445328", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) syz_io_uring_setup(0x4de5, &(0x7f0000000080)={0x0, 0xb790, 0x20, 0x20003, 0x29f, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 17:32:24 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/37, 0x25}, {0x0}, {&(0x7f00000000c0)=""/13, 0xd}], 0x3) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x810, r2, 0x10000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x53, 0x0, &(0x7f0000000040)=[r0, r0]}, 0x2) 17:32:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xb00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:24 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xc00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:24 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:24 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) fork() r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) getpriority(0x1, r3) 17:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0fdde5a27000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf2501000000050003005e0000000800060000000000050004000000000004000500"], 0x30}}, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:24 executing program 3: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) shmget(0x3, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget(0x1, 0x4000, 0x78000010, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x8000000) 17:32:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xd00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:24 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:25 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r1) getpriority(0x1, r3) 17:32:25 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) socketpair(0x28, 0x4, 0x446, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x1ff, 0x3, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x68, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@noop, @timestamp_prespec={0x44, 0x24, 0xba, 0x3, 0x3, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010100, 0x4}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @lsrr={0x83, 0xf, 0xe7, [@broadcast, @multicast1, @empty]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0x3, [{0x1, 0x4, "b4eb"}, {0x5, 0x4, "409b"}]}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 17:32:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xe00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:25 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3201, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r4 = socket(0x10, 0xa, 0x7fffffff) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab9704", "9aab5c3c732bf8a9"}, 0x28) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25010000fc52a163a9ce8cce26fc61f7b30008000b005c67bc2789a10b9478285a45f8643709aa23ca2f674456075ac4576afb01e5937b3b7abaf0ad29d94ce59eee4db5e9b9b47f6532c5c6baad34e20504eade0d219d04dc7cdb0e178e03e5cdcd71f68982e6103bdf39993544843212dd765d9a21aa42a3688cd326ce31efa18e132104fea50a3a4fe26f8bfbed2f5be2177c29bd01be49ddc2756755e02f75caf0e0efa0c120ea9ea5718a42c7fa11cdc3ab7b", @ANYRES32=r0, @ANYBLOB="0400050014000900200100000000000000000000000000011400070000000000000000000000000000000000080006000a010100"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0xffffffff, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/53, 0x35}, {0x0}, {&(0x7f0000000640)=""/102400, 0x19000}], 0x3) 17:32:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:25 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) syz_io_uring_setup(0x42e0, &(0x7f0000000040)={0x0, 0x950f, 0x1, 0x1, 0x3e1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 17:32:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1000000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:25 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000003400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000033c0)={&(0x7f0000000040)={0x3350, 0x12, 0x100, 0x70bd2d, 0x25dfdbff, {0x18, 0x2, 0xc1, 0x4, {0x4e21, 0x4e21, [0x0, 0xfffffff7, 0x2e7c, 0x8], [0x5, 0x7fffffff, 0x80000801, 0x2], 0x0, [0x800, 0xfffffffd]}, 0x4, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "573a52bdc2ef018a3a9b571fdbcbe4e38f65a0ca8b50d49b902c9ff8bb743a7afc138d7d26191d52efe4d0c542d80523d58beb84a57216c4d92c5aea402542c3e6c1e19ce1f6101a056ae3282c0f3bc30d0b7f207d8d4a180be90df42b07e223add2e3712330b7a8e80b44c582d866f8f08808f68fd1ecb5fb651d3d67d28552d575e4b83a9abf27254f9ba2a831a1102ce8bb1a1bfe49645d1ee563f6ffffc6e975b40ac31a2418a02c2a6e75bda514fefbb8975928"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "0d0791c071690588832b7a4034e755c6173698c94019bcd3590bcb2328f4a760cbf4cf81dddf3972122e2d9be6d0b511575c1a7871e7542231105c"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "2b1552f4de9270cdcfb874ba48e4ea25f5bcffe5a7318c8ac68bd91439c7e075bfadf404061157e6d5073b8170d89792b6474c081ed3d4c2d35393a971146412ed3498d3e0eef51f74d64f04c82fba87c466417eed0f31e4a461b2a82fb56efbe4b58d3886f0ad4e27a113df257395c6ff8326b9fb413d822608851855b5afaec0634131928ded6ec6e32663c79d"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "c1fdf3c449ad2bc12561479188cd61a43adbfb94cb09e015493bb557569ea0d27357576384d6c7e8d21437ebce23de09aa8bae1b7beb73fe5c56d9bab490328f8cf848b6a1afba7a65ea82f1c3303270620433df8a06ae679977600e9a7a33258e75ef78e4271136522d0944e5cdc2"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "f62d8db1f89eec2e87f2d9a178ea36f882f30053570e228427f15a22fb0a54a32010af1101877214e452cd43eb8c98aaeba9c2692e692910afba6ed9cecfecdc6384dbb6956490303b48e2032bc2c1669b2662eb10b3a357de9755a9e2f70e216468f58aa57243130a3b9f9f127875c97afc7d9306e9faf3ba3cb6867b06515d51090bca88b6c6456722b1edb94cb1d450de726cf9ee9f1261f1ec"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "0a7ab5c2f7f76c1f4ca0d0bbea0b358273487da857d7387ce4cb1105e8d61313b719b12276081b53820cb2183e26261a729a2634d9e602d8cdd03b96d5e59e32a9722ca7959024d0492841bf"}]}, 0x3350}, 0x1, 0x0, 0x0, 0x40004}, 0x4000004) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003480), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000034c0), 0x44a200, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000003640), 0x4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) write$selinux_attr(r2, &(0x7f0000003680)='system_u:object_r:policy_config_t:s0\x00', 0x25) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0xc0, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000040}, 0x40480d0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:25 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:25 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1100000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:26 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() fork() r1 = fork() wait4(r1, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:26 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x2, {{0x39, 0x4, 0x2, 0x10, 0xe4, 0x67, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x88, 0x12, "d28dbb0698617529fc112b7c7e938d6a"}, @lsrr={0x83, 0xf, 0x99, [@rand_addr=0x64010101, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xdc, 0x1, 0x3, [{@multicast1, 0x5b0dc783}, {@multicast1, 0x89f2}]}, @generic={0x82, 0xb, "a54eb5ba0ad7e30244"}, @timestamp_addr={0x44, 0x34, 0xd, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x617}, {@multicast2, 0xffff}, {@multicast1, 0x1000}]}, @timestamp_prespec={0x44, 0x2c, 0x63, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x2}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}]}, @generic={0x1, 0x8, "05dbeeeb06bb"}, @lsrr={0x83, 0x23, 0x52, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @private=0xa010100, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast2}, r0}, 0x14) r1 = getpgrp(0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) getpriority(0x1, r1) 17:32:26 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:26 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) r1 = shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x1000) 17:32:26 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1200000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:26 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r0 = socket$inet6(0xa, 0xa, 0x6) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/45, 0x25}, {0x0, 0xfe0a}, {&(0x7f00000000c0)}], 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:var_run_t:s0\x00', 0x1f) 17:32:26 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2d00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:26 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() r1 = fork() r2 = getpgrp(r1) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) wait4(r3, &(0x7f0000000000), 0x1, &(0x7f0000000040)) getpriority(0x1, r2) 17:32:26 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0xcddd2167d051a5aa) 17:32:26 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:26 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f00000000c0)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) 17:32:26 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4000000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:27 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() fork() fork() getpriority(0x1, 0x0) 17:32:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4800000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:27 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x22) r1 = io_uring_setup(0xb69, &(0x7f0000000080)={0x0, 0xd5b, 0x1, 0x0, 0x3da}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x810, r1, 0x8000000) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r0, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7f}) 17:32:27 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000100)={0x40, 0x0, 0x8, {0x8, 0x101}, 0x3, 0x935}) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x377}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000040)=""/5, 0x5}], 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/118, 0x76}], 0x5) 17:32:27 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:27 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x95d8, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10001) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000000c0)={0x1ff, 0x0, 0x6, 0x3, 0x9, 0x2}) r3 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[r4, r5, r6, r1], 0x4) 17:32:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4c00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:27 executing program 2: r0 = getpgrp(0xffffffffffffffff) fork() pidfd_open(0x0, 0x0) getpriority(0x1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x2, 0x6, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x103380) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}, {0x0, 0x8}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000240)={0x0, 0x10a3, 0x1, 'queue1\x00', 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000880)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0x1, 0x44}, 'port1\x00', 0x66, 0x111046, 0x3, 0x100, 0x201000, 0xfffeffff, 0xffffffff, 0x0, 0x4, 0x81}) 17:32:27 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6800000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:27 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) 17:32:27 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:27 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x6c00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:27 executing program 3: shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x0) 17:32:27 executing program 4: io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:27 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:27 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x87ea5) r2 = getpgrp(0xffffffffffffffff) getpriority(0x1, r2) 17:32:27 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() fork() getpriority(0x1, 0x0) 17:32:27 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x50, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0xb2588910feeb8335, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x7b8e, &(0x7f0000000040)={0x0, 0xf4f5, 0x4, 0x2, 0x3dd}, &(0x7f0000001000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:28 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0xff, 0x98}, 'port0\x00', 0x0, 0x22, 0x1, 0x9, 0x80, 0x0, 0x4, 0x0, 0x6, 0x5}) r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) getpriority(0x2, r1) 17:32:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7400000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:28 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) shmdt(r0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x2010, r1, 0x0) 17:32:28 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x7a00000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:28 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmget(0x1, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3f, 0x4, 0x3, 0xc1, 0x0, 0x2a5, 0x10001, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x2100, 0x101, 0xcfd, 0x8, 0x1ff, 0x84, 0x5e72, 0x0, 0x88, 0x0, 0xffff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) 17:32:28 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) fork() getpriority(0x1, 0x0) 17:32:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x8004000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:28 executing program 3: r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 17:32:28 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:28 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x40000001, 0x1e3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x0) io_uring_setup(0x76df, &(0x7f00000002c0)={0x0, 0x5a72, 0x8, 0x0, 0x112, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000040)}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)=""/132, 0x84}], 0x5) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 17:32:28 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) shmdt(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x8001, 0x800, 0x1f, 0x9, 0x8000, 0x2}) 17:32:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4620, 0xb3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x82}, {0xa, 0x4e24, 0x28, @private0}, 0x1, [0x9, 0x1, 0xff, 0x3, 0x101, 0x1, 0x3f, 0x3]}, 0x5c) r1 = getpgrp(0xffffffffffffffff) r2 = fork() wait4(r2, &(0x7f0000000480), 0x1000000, &(0x7f00000004c0)) getpriority(0x1, r1) r3 = syz_io_uring_setup(0x1435, &(0x7f0000000080)={0x0, 0xbad, 0x3, 0x2, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgrp(r1) waitid(0x1, r7, &(0x7f0000000200), 0x1, &(0x7f0000000280)) r8 = pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r8, &(0x7f0000000340), 0x1000000, &(0x7f0000000580)) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000180)=[r4, r0, r0, 0xffffffffffffffff, r0, r6, r9]}, 0x7) 17:32:28 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:28 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xcc02000000000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:28 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x18b800) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 17:32:28 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xfeffffff00000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:29 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:29 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:29 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() getpriority(0x2, r1) getpriority(0x1, r0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x4e23, 0xfffffffd, @remote, 0x97}}, 0x1, 0x8, [{{0xa, 0x4e22, 0x595b, @dev={0xfe, 0x80, '\x00', 0x30}, 0x9}}, {{0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}, {{0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200}}, {{0xa, 0x4e22, 0x400, @mcast1, 0x9}}, {{0xa, 0x4e23, 0xe0a, @mcast1}}, {{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {{0xa, 0x4e24, 0x80000000, @mcast1, 0x65c}}, {{0xa, 0x4e23, 0x1f, @mcast2, 0x8}}]}, 0x490) 17:32:29 executing program 3: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x204040) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x9, 0x0, 0xf, 0x0, "a00bd96e5170991717985d500f23323f3f5b1eb80185c47334d202efad7fdcea5177834f22831786957ca6904be2bc0a6d30462f51aaa2e894ecfeb1dded533f", "4f606ca37c149f7dabb3c59196011262ce0646f66b02151a80abe3686f572380", [0x4, 0x8]}) ioctl$LOOP_CLR_FD(r4, 0x4c01) shmdt(r0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 17:32:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xffffffff00000000, 0x0, 0x0, &(0x7f0000000000)) 17:32:29 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r2 = pidfd_open(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r1, r2, r0, r0, 0xffffffffffffffff, r3]}, 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r4 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000000)) 17:32:29 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:29 executing program 2: r0 = getpgrp(0x0) getpriority(0x1, r0) 17:32:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 17:32:29 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x5000003, 0x12, r0, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x6000) 17:32:29 executing program 4: r0 = syz_io_uring_setup(0x3741, &(0x7f0000000340), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:30 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:30 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() r2 = getpgrp(r0) pidfd_open(r2, 0x0) wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000040)) getpgrp(r1) r3 = fork() getpgrp(r3) pidfd_open(r1, 0x0) waitid(0x2, r3, &(0x7f0000000100), 0x1000000, &(0x7f0000000180)) ptrace$setregset(0x4205, r2, 0x4, &(0x7f00000002c0)={&(0x7f0000000240)="261605734e879a69df4ae70bf68fdfe8660d6c5ddae354e68e2eb889a73af7b94e927875a313b754d09132d19b7bac5db69452eab786ae90d21690bce057752005369046f09f31e45819d72e039b538dc64e41793c18b22a1dd2d3da72febc017c1196d50677fbb7804b8da14b38a546331bb5ca93b485", 0x77}) getpriority(0x1, r0) 17:32:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)) 17:32:30 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:30 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x3000) 17:32:30 executing program 4: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:30 executing program 3: r0 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) shmget(0x1, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2d}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x10010, 0xffffffffffffffff, 0x10000000) 17:32:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 17:32:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000000)) 17:32:30 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:30 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) waitid(0x1, r0, &(0x7f00000000c0), 0x1000000, &(0x7f0000000340)) waitid(0x1, r0, &(0x7f0000000200), 0x2, &(0x7f0000000280)) r1 = fork() r2 = fork() getpriority(0x1, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x7, 0x0, 0x7, 0x0, 0x8, 0x900, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x10008, 0x0, 0x81, 0x6, 0x40, 0x6, 0x5945, 0x0, 0x7b8, 0x0, 0x3f}, r1, 0x1, 0xffffffffffffffff, 0x1) 17:32:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 17:32:31 executing program 5: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, 0x0) 17:32:31 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:31 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = pidfd_open(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[r0, r1, 0xffffffffffffffff, r0, r2, r0]}, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000180), 0xf00200}], 0x3) 17:32:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7, 0x0, &(0x7f0000000000)) 17:32:31 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) 17:32:31 executing program 2: r0 = getpgrp(0xffffffffffffffff) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000000), 0x4, &(0x7f0000000080)) getpriority(0x1, r0) 17:32:31 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x0, r0) pidfd_open(r0, 0x0) getpriority(0x1, r0) 17:32:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x8, 0x0, &(0x7f0000000000)) 17:32:31 executing program 3: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x25}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) pidfd_open(0x0, 0x0) syz_io_uring_setup(0x15e1, &(0x7f00000001c0)={0x0, 0xd52c, 0x4, 0x2, 0x265}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x5f) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) pidfd_open(r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000080)={'\x00', 0x2, 0x1, 0xfffffffa}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r4, 0x1) 17:32:31 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:31 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) wait4(r1, &(0x7f0000000080), 0x2, &(0x7f00000000c0)) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000040)={&(0x7f0000000000)="00b19bb9e98b84ffd2f1f57a1644387bacb2bb1af55b4f6df6", 0x19}) getpriority(0x1, r0) r2 = fork() wait4(r2, &(0x7f0000000180), 0x8, &(0x7f00000001c0)) 17:32:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x9, 0x0, &(0x7f0000000000)) 17:32:32 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 17:32:32 executing program 5: fork() fork() getpriority(0x1, 0x0) 17:32:32 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xa, 0x0, &(0x7f0000000000)) 17:32:32 executing program 5: fork() getpriority(0x1, 0x0) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xb, 0x0, &(0x7f0000000000)) 17:32:32 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:32 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:32 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x20, 0x5, 0xfffffffb, &(0x7f0000000000)) 17:32:32 executing program 5: fork() getpriority(0x1, 0x0) 17:32:32 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() getpriority(0x0, r1) getpriority(0x1, r0) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xc, 0x0, &(0x7f0000000000)) 17:32:32 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:32 executing program 5: fork() getpriority(0x1, 0x0) 17:32:32 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:32 executing program 3: r0 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget(0x3, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x13, 0x10010, r3, 0x5) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x6000) 17:32:32 executing program 5: fork() fork() getpriority(0x0, 0x0) 17:32:32 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xd, 0x0, &(0x7f0000000000)) 17:32:32 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) getpgrp(r1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000100)="60c3f74db151f5e5713014dcbd47d910433a8bdc5e80630d209e0496f9cbf179249e1d2de6df6a772aab4f4d1a2dd26642d2cf5d231add3a8f5f2395437d1d38fbe4e21029bdbf935391ae6bc1348da6d4d2bab10119910f0e658fcad43ffea93982b09290d8aca19c1c7e275f6f660b2363133e7a0e9848b012f91c18874c67ddd9d2fb225cc7f068c26ee7948c10e1b385312bec057feb2bc7482c42b0eb6a385f9416e16392e499", 0xa9}) getpriority(0x1, r0) waitid(0x2, r0, &(0x7f0000000000), 0x20000000, 0x0) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 17:32:32 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x58}}, 0x2004c040) 17:32:32 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:32 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmdt(r0) 17:32:32 executing program 5: fork() fork() getpriority(0x0, 0x0) 17:32:32 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x1f, 0xce, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x3f, 0x7fffffff}, 0x200, 0x2, 0x6, 0x3, 0x4, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, r1, 0x9) getpriority(0x1, r0) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xf, 0x0, &(0x7f0000000000)) 17:32:32 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x10, 0x0, &(0x7f0000000000)) 17:32:32 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmdt(r0) 17:32:32 executing program 5: fork() fork() getpriority(0x0, 0x0) 17:32:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa280) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x95, 0x40875, 0x6, 0x6, 0x10001, 0x0, 0xff, 0x0, 0x6, 0x6}) r2 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x3000) 17:32:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x870}, 0x8000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x2470, &(0x7f0000000140)={0x0, 0x4ada, 0x0, 0x1, 0x397, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r2 = getpgrp(0xffffffffffffffff) getpriority(0x1, r2) 17:32:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x11, 0x0, &(0x7f0000000000)) 17:32:33 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil) shmdt(r0) 17:32:33 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x20, 0x5, 0xfffffffb, &(0x7f0000000000)) 17:32:33 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x32010000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x12, 0x0, &(0x7f0000000000)) 17:32:33 executing program 2: r0 = getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) getpriority(0x1, r0) 17:32:33 executing program 3: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25020000000c0005000c000000000000000c0008000600100000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x11d1}, 0x1) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:33 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2d, 0x0, &(0x7f0000000000)) 17:32:33 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:33 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x20, 0x5, 0xfffffffb, &(0x7f0000000000)) 17:32:33 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/45, 0x2d}) wait4(r1, 0x0, 0x2, 0x0) pidfd_open(r1, 0x0) getpriority(0x1, r0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) fork() wait4(r3, 0x0, 0x80000000, &(0x7f0000000180)) 17:32:33 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:33 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x20, 0x5, 0xfffffffb, &(0x7f0000000000)) 17:32:33 executing program 3: r0 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x80000000, 0x1, 0x3, 0xd, 0x4, 0x8}, 0x20) syz_io_uring_setup(0x2ec2, &(0x7f0000000200)={0x0, 0xc622, 0x1, 0x2, 0x108}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r1 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8045}, 0x91) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000000)={{0x7f, 0x9}, {0x0, 0x6a}, 0x9326, 0x5, 0x5f}) 17:32:33 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x48, 0x0, &(0x7f0000000000)) 17:32:33 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:33 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:33 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:33 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4c, 0x0, &(0x7f0000000000)) 17:32:33 executing program 3: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:33 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:34 executing program 2: getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, r0) r1 = fork() r2 = getpgrp(r1) ptrace$setregset(0x4205, r2, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="7a8999127c900300d8bc468f04b4baeda3087c5a3d103450aec97854b55ca794416e1664996e61118c94519e0866c1bc02cd0687f80422b1d14026d67d6fd7eb31df8949ff9d18fb5c8b2d7c48c55a8141526e8d99720a6622b9afe04b7e84d29deda71cc13765292b18ff1429a237e4def0c9593493e3677e54d581094f5d15c70857488017ea5f6fac0639696a833150180231cd8450d182ad4fa9f57649fd6c065a07d1b44f3751a1dc864308163d67a0c8421b4ca56e7d1b1c4847153dd646a024ab4b7b75a3f9185d87bad59927d8ae2efc2358eceff7f20c9c95b6ee87e39d00c2d2c746318f4469ade828683e678ea65405a926c36a", 0xf9}) wait4(r1, 0x0, 0x2, 0x0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) 17:32:34 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x68, 0x0, &(0x7f0000000000)) 17:32:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:34 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:34 executing program 3: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x40000, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x500000c, 0x8010, r1, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x4, 0x3, 0x8, 0x9, 0x200, 0xffffffff}) 17:32:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6c, 0x0, &(0x7f0000000000)) 17:32:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:34 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:34 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:34 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000007, 0x2010, 0xffffffffffffffff, 0x10000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17:32:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x74, 0x0, &(0x7f0000000000)) 17:32:35 executing program 2: fork() r0 = fork() r1 = fork() perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7b, 0xff, 0x4, 0x1f, 0x0, 0x81, 0x1020, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x48d, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x844, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x83b, 0x0, 0xf61, 0x0, 0xff}, r1, 0x0, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x2, 0x0) r2 = fork() ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000000c0)={0x7f64, 0xf0000000, 0x1, 'queue0\x00', 0x3f}) wait4(r2, 0x0, 0x2, 0x0) r3 = getpgrp(r2) getpriority(0x1, r3) 17:32:35 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:35 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7a, 0x0, &(0x7f0000000000)) 17:32:35 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:35 executing program 3: shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x3, 0x1000, 0x100, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:35 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:35 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) 17:32:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2cc, 0x0, &(0x7f0000000000)) 17:32:35 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:35 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x300, 0x0, &(0x7f0000000000)) 17:32:36 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) wait4(r1, &(0x7f0000000240), 0x4, &(0x7f0000000280)) waitid(0x0, r1, &(0x7f0000000100), 0x20000000, &(0x7f0000000180)) getpriority(0x1, r0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) waitid(0x1, r2, &(0x7f0000000440), 0x80000000, &(0x7f00000004c0)) r3 = syz_io_uring_setup(0x5a94, &(0x7f0000000000)={0x0, 0x541e, 0x8, 0x3, 0x65}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xff, 0xff, 0x5, 0x5, 0x0, 0x33, 0x100, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0xfc0, 0xff}, 0x400, 0x0, 0x4, 0x9, 0x50, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = fork() setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0xffffaf7b, @loopback, 0x8}, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1ff}, 0xf60a, [0xb9, 0x0, 0x6, 0xffffffff, 0x1, 0x80000001, 0x9, 0x2]}, 0x5c) wait4(r4, 0x0, 0x2, 0x0) waitid(0x1, r4, &(0x7f0000000340), 0x4, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) 17:32:36 executing program 3: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r1) shmdt(r1) 17:32:36 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) 17:32:36 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:36 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:36 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x480, 0x0, &(0x7f0000000000)) 17:32:36 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) 17:32:36 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x500, 0x0, &(0x7f0000000000)) 17:32:36 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:36 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:36 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x6000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) shmdt(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="081626bd7200ffdbdf251c00000008000000086c28555d916831680c3ae482c8208152f99295077e9dccce6cbbd6e2c6719c968890beeb571c30e60e37398d1e53a4c17a8a429bf259eea9a383b79f1a5f503b34548847ad86bfc43e182bd2d157c014055c7f61cfbb605b5bb76a38324233d10f96d4d833feb91e98bccde4a1bcc6e85b96996cd364f905a6db1cec47de0aad431e9a057497c405a512c8b4b30f28134c0b4dd21ba0c952d121c107c80305f2c808e18762b9fd05d88ae71383e0e7cbe763f90b52898d7736b1431055bd961e5c3ad5143f03200bf05dfb3169ba61f03346e36cd33f9530b8500e9d6e07adafd9dde368eff0e4904c58c1bb6015d90d80e33eadd0b8c4366ddb39590cac150990610e42e2e7c3f33d611e12f1653f7a9ae1bf7f4f04f0e9b89cac5194ef89cdf5a31ccd38bcc414b03aa20b080d3ac2d8ec392a9eff066d950202916dcbce6e", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x200040c0) 17:32:36 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:37 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x600, 0x0, &(0x7f0000000000)) 17:32:37 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:37 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x20, 0x4) 17:32:37 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x700, 0x0, &(0x7f0000000000)) 17:32:37 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x20, 0x5, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x1, 0x4, 0x4}}) r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(r0) shmdt(r0) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x900, 0x0, &(0x7f0000000000)) 17:32:37 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:37 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) getpriority(0x0, r1) getpriority(0x1, r0) 17:32:37 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:37 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28082}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x385352dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcfee7fe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b6aa327}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x567a1aee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4270780f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b42437}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19ab9bb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaa0fe44}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198a1670}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2428cef3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x145b32a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f8934a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c28e311}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ba36337}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d29cfc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3100fb52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x20004814) 17:32:37 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xa00, 0x0, &(0x7f0000000000)) 17:32:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xb00, 0x0, &(0x7f0000000000)) 17:32:37 executing program 3: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) 17:32:37 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:37 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:37 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xc00, 0x0, &(0x7f0000000000)) 17:32:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:38 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4801, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x12, 0x8, 0xc, "fc8c6c945c90b0728ddbb2da3ccff3d14fd29399723debaa24589a671c835836ef33856c74959765ebc5a464f67cb1dc3080d6535ced04e45591d5005d17926a", "a64233293c7d23f9738ed89f157e53b615ca4789fa5307421d9189dca2fca7bb933d74b9be0973a83006602fedd291da38dd08538f9e9f28955a484040c4619c", "7808a3d72bd647174164f91bde0c55f08975c76f8af5a727a34b50254cdabd22"}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:38 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:38 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = pidfd_open(r1, 0x0) getpriority(0x1, r0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r5, 0x4c01) read$ptp(r4, &(0x7f0000000080)=""/58, 0x3a) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000000)=0x4, 0x4) 17:32:38 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:38 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:38 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xd00, 0x0, &(0x7f0000000000)) 17:32:38 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:38 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xe00, 0x0, &(0x7f0000000000)) 17:32:38 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:38 executing program 3: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:38 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:38 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xf00, 0x0, &(0x7f0000000000)) 17:32:39 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00'}) r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x36b2, 0x3ff, 0x0, 0x20ab7649f9cd5a6c, 0xd, 0x19, "cb0272138d8adaa20d6be6e96ef6f26b2ae8540819556289477d8bf140d9ede65803000000cb49dfb3812a157f8bf4399a7c1f0ed30931574ed6ae1cdfd7a9c2", "28181656593574f5dd6a09e553c3b98d8e9046a44d7c5140d30cbe991c36cfe187b3d0a06957b069fb8b9c5f6a76f0c68fbf807615b0c47a78f95db813721fc9", "958322f07399d362f8e0739746438c8c6897e613d29943b2aa54bec8a49ea12e", [0x3f, 0x205]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="61b66e084d2d0200", @ANYRES16=r4, @ANYBLOB="001325bd7000fddbdf2515000000080021000c00050004000000000000003083b5773572bdf6df1cccb37ce3fcdb0aff66f10f2b3c96e386ebcb25dc1b9ca6eb23894b60c42e83d53cbb1af09b0638c7c187cf79d0d3d5232e8ac4b563a8f1cb1ea87f6e262c4a949b4ebbcdec993829aeecdd11de4db7173124252f5b3fa8445d94af97468c1bbb0bbb97d797f95f3218616771f292821446c34a26ac1daf9dde2cc912fb82ad7c5d9c0d7509c337dd5f4ef74a337240e3fb3142cd99e393efd6cb6f00"/207], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x9, 0x4, 0xc, "25a35e0802fcf639d14507f3112ef39138edfc7684c105a740219f7a9fdd1c539a5d34f447dd42757beda06e5aa3d249c8d037e89bdc7e89be3d2e8d0dfd3035", "3a501b4e31520865c1c9e6a1f1ef6fdafcbd52aba1d94be341db0b7ba605a58782a37910ea1416e8a9c2f7741a9cf2f8d0b640c499e07beedde0e8a99d4fd7c9", "0eb08b6dbb33b40a46d04d7a5073cece47e94756e1942bcf675cfa67eb514583", [0xd6, 0x9]}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x103, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x810) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000200)={'\x00', 0x424, 0x2, 0x5}) 17:32:39 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1100, 0x0, &(0x7f0000000000)) 17:32:39 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) 17:32:39 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(r0) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1200, 0x0, &(0x7f0000000000)) 17:32:39 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2000, 0x0, &(0x7f0000000000)) 17:32:39 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(r0) 17:32:39 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmdt(r0) shmdt(r0) 17:32:39 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000000)={0x7}) r1 = fork() pidfd_open(0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) getpriority(0x2, r1) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x8, 0x1, 0x0, 0x51, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000340)}, 0x60405, 0x80, 0x8, 0x5, 0x1f00000000000000, 0x20000, 0x20, 0x0, 0x1, 0x0, 0xdbd}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x40) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2d00, 0x0, &(0x7f0000000000)) 17:32:39 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:39 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(r0) 17:32:39 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:39 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4000, 0x0, &(0x7f0000000000)) 17:32:39 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:39 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) shmdt(r1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x4010, 0xffffffffffffffff, 0x5) r3 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r1) 17:32:39 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:39 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:39 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4800, 0x0, &(0x7f0000000000)) 17:32:40 executing program 2: r0 = getpgrp(0xffffffffffffffff) waitid(0x1, r0, 0x0, 0x4, 0x0) r1 = getpgrp(r0) wait4(r1, &(0x7f0000000000), 0x2, &(0x7f0000000040)) getpriority(0x1, r0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) wait4(r2, &(0x7f0000000100), 0x1, 0x0) 17:32:40 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17:32:40 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:40 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:40 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x80, 0x2}, {0x4, 0x5}, 0x81, 0x6, 0xfa}) 17:32:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4c00, 0x0, &(0x7f0000000000)) 17:32:40 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:40 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0xfe, 0x1, 0x9, 0x40, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x10, 0x80, 0x9, 0xfff}}) r0 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 17:32:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6800, 0x0, &(0x7f0000000000)) 17:32:40 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 1) 17:32:40 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3201000000000000, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:40 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) [ 3056.663172][T28997] FAULT_INJECTION: forcing a failure. [ 3056.663172][T28997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3056.676455][T28997] CPU: 0 PID: 28997 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3056.685219][T28997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3056.695272][T28997] Call Trace: [ 3056.698597][T28997] dump_stack_lvl+0xd6/0x122 [ 3056.703218][T28997] dump_stack+0x11/0x1b [ 3056.707418][T28997] should_fail+0x23c/0x250 [ 3056.711896][T28997] __alloc_pages+0x102/0x320 [ 3056.716487][T28997] alloc_pages+0x382/0x3d0 [ 3056.720903][T28997] __pmd_alloc+0x47/0x340 [ 3056.725232][T28997] handle_mm_fault+0x1224/0x1580 [ 3056.730170][T28997] do_user_addr_fault+0x609/0xbe0 [ 3056.735275][T28997] exc_page_fault+0x91/0x220 [ 3056.739865][T28997] asm_exc_page_fault+0x1e/0x30 [ 3056.744715][T28997] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3056.750442][T28997] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3056.770056][T28997] RSP: 0018:ffffc90001d97e80 EFLAGS: 00050293 [ 3056.776180][T28997] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3056.784151][T28997] RDX: ffff8881830da000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3056.792229][T28997] RBP: 0000000000000001 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3056.800461][T28997] R10: 000188817be79907 R11: 0000000000000000 R12: 0000000000000001 [ 3056.808595][T28997] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3056.816584][T28997] ? __sys_socketpair+0xa8/0x810 [ 3056.821557][T28997] __sys_socketpair+0xc4/0x810 [ 3056.826323][T28997] __x64_sys_socketpair+0x4e/0x60 [ 3056.831350][T28997] do_syscall_64+0x44/0xa0 [ 3056.835849][T28997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3056.841743][T28997] RIP: 0033:0x7f675c661709 [ 3056.846157][T28997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.865839][T28997] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3056.874257][T28997] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3056.882275][T28997] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3056.890243][T28997] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3056.898399][T28997] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3056.906350][T28997] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:41 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x1, 0xa50b, 0x1, 'queue1\x00', 0x99}) waitid(0x1, r1, &(0x7f0000000000), 0x40000000, 0x0) 17:32:41 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x2, 0x8, 0x7, 0x0, 0x42c9f4cb, 0x20b4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x108, 0x3f, 0x9, 0x4, 0x9, 0x4, 0x4, 0x0, 0x10001, 0x0, 0xd954}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000b40000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) mmap$perf(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0xff) 17:32:41 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(r0) 17:32:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6c00, 0x0, &(0x7f0000000000)) 17:32:41 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x2}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:41 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 2) 17:32:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) [ 3057.513796][T29013] FAULT_INJECTION: forcing a failure. [ 3057.513796][T29013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3057.527076][T29013] CPU: 0 PID: 29013 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3057.535977][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3057.546114][T29013] Call Trace: [ 3057.549395][T29013] dump_stack_lvl+0xd6/0x122 [ 3057.553994][T29013] dump_stack+0x11/0x1b [ 3057.558154][T29013] should_fail+0x23c/0x250 17:32:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7400, 0x0, &(0x7f0000000000)) [ 3057.562576][T29013] __alloc_pages+0x102/0x320 [ 3057.567168][T29013] alloc_pages+0x382/0x3d0 [ 3057.571620][T29013] pte_alloc_one+0x29/0xb0 [ 3057.576121][T29013] __pte_alloc+0x2f/0x220 [ 3057.580449][T29013] do_anonymous_page+0x7a9/0x8b0 [ 3057.585400][T29013] ? __pmd_alloc+0x301/0x340 [ 3057.589994][T29013] handle_mm_fault+0x7f5/0x1580 [ 3057.594845][T29013] do_user_addr_fault+0x609/0xbe0 [ 3057.599918][T29013] exc_page_fault+0x91/0x220 [ 3057.604584][T29013] asm_exc_page_fault+0x1e/0x30 17:32:41 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x3}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3057.609438][T29013] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3057.615255][T29013] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3057.634914][T29013] RSP: 0018:ffffc90001e8fe80 EFLAGS: 00050293 [ 3057.640982][T29013] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3057.648954][T29013] RDX: ffff8881830da000 RSI: 0000000000000005 RDI: 00000000ffffffff 17:32:41 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) [ 3057.656986][T29013] RBP: 0000000000000001 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3057.664954][T29013] R10: 000188811f622107 R11: 0000000000000000 R12: 0000000000000001 [ 3057.672923][T29013] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3057.680896][T29013] ? __sys_socketpair+0xa8/0x810 [ 3057.685847][T29013] __sys_socketpair+0xc4/0x810 [ 3057.690654][T29013] __x64_sys_socketpair+0x4e/0x60 [ 3057.695765][T29013] do_syscall_64+0x44/0xa0 [ 3057.700185][T29013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3057.706084][T29013] RIP: 0033:0x7f675c661709 17:32:41 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x4}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3057.710493][T29013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.730097][T29013] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3057.738552][T29013] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3057.746524][T29013] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3057.754489][T29013] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.762525][T29013] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3057.770494][T29013] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7a00, 0x0, &(0x7f0000000000)) 17:32:41 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() r2 = fork() ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000180)={&(0x7f0000000140)="b23af347762cc284de67580de7258272aeac207d79acc5d511ea7b20237813166adf13a550753f23", 0x28}) waitid(0x1, r1, &(0x7f0000000000), 0x2, &(0x7f0000000080)) getpriority(0x1, r0) 17:32:41 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) 17:32:41 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) 17:32:41 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 3) 17:32:41 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x5}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x8004, 0x0, &(0x7f0000000000)) [ 3058.382340][T29043] FAULT_INJECTION: forcing a failure. [ 3058.382340][T29043] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.395355][T29043] CPU: 0 PID: 29043 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3058.404216][T29043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.414288][T29043] Call Trace: [ 3058.417567][T29043] dump_stack_lvl+0xd6/0x122 [ 3058.422171][T29043] dump_stack+0x11/0x1b [ 3058.426325][T29043] should_fail+0x23c/0x250 17:32:42 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xcc02, 0x0, &(0x7f0000000000)) [ 3058.430785][T29043] ? __anon_vma_prepare+0x41/0x2d0 [ 3058.435899][T29043] __should_failslab+0x81/0x90 [ 3058.440676][T29043] should_failslab+0x5/0x20 [ 3058.445292][T29043] kmem_cache_alloc+0x4f/0x300 [ 3058.450045][T29043] ? pte_alloc_one+0x8c/0xb0 [ 3058.454632][T29043] __anon_vma_prepare+0x41/0x2d0 [ 3058.459675][T29043] do_anonymous_page+0x7ca/0x8b0 [ 3058.464608][T29043] ? __pmd_alloc+0x301/0x340 [ 3058.469190][T29043] handle_mm_fault+0x7f5/0x1580 [ 3058.474039][T29043] do_user_addr_fault+0x609/0xbe0 17:32:42 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x6}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3058.479056][T29043] exc_page_fault+0x91/0x220 [ 3058.483635][T29043] asm_exc_page_fault+0x1e/0x30 [ 3058.488583][T29043] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3058.494322][T29043] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3058.514009][T29043] RSP: 0018:ffffc90001e77e80 EFLAGS: 00050293 [ 3058.520100][T29043] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3058.528071][T29043] RDX: ffff888127608080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3058.536039][T29043] RBP: 0000000000000001 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3058.544002][T29043] R10: 0001888127171b07 R11: 0000000000000000 R12: 0000000000000001 [ 3058.552076][T29043] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3058.560046][T29043] ? __sys_socketpair+0xa8/0x810 [ 3058.564986][T29043] __sys_socketpair+0xc4/0x810 [ 3058.569768][T29043] __x64_sys_socketpair+0x4e/0x60 [ 3058.574785][T29043] do_syscall_64+0x44/0xa0 17:32:42 executing program 4: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) [ 3058.579198][T29043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3058.585094][T29043] RIP: 0033:0x7f675c661709 [ 3058.589502][T29043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.609103][T29043] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3058.617558][T29043] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3058.625584][T29043] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3058.633557][T29043] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.641533][T29043] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3058.649500][T29043] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:42 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:42 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x200000, 0x0, &(0x7f0000000000)) 17:32:42 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:42 executing program 3: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) fork() 17:32:42 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1000000, 0x0, &(0x7f0000000000)) 17:32:42 executing program 2: r0 = getpgrp(0xffffffffffffffff) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) getpriority(0x1, r0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4) 17:32:42 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 4) 17:32:42 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:42 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x8}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3059.349684][T29086] FAULT_INJECTION: forcing a failure. [ 3059.349684][T29086] name failslab, interval 1, probability 0, space 0, times 0 [ 3059.362361][T29086] CPU: 1 PID: 29086 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3059.371214][T29086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3059.381271][T29086] Call Trace: [ 3059.384568][T29086] dump_stack_lvl+0xd6/0x122 [ 3059.389160][T29086] dump_stack+0x11/0x1b [ 3059.393338][T29086] should_fail+0x23c/0x250 17:32:43 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmdt(0x0) 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x9}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3059.397746][T29086] ? __anon_vma_prepare+0x92/0x2d0 [ 3059.402915][T29086] __should_failslab+0x81/0x90 [ 3059.407748][T29086] should_failslab+0x5/0x20 [ 3059.412254][T29086] kmem_cache_alloc+0x4f/0x300 [ 3059.417012][T29086] ? __anon_vma_prepare+0x41/0x2d0 [ 3059.422127][T29086] __anon_vma_prepare+0x92/0x2d0 [ 3059.427061][T29086] do_anonymous_page+0x7ca/0x8b0 [ 3059.432038][T29086] ? __pmd_alloc+0x301/0x340 [ 3059.436630][T29086] handle_mm_fault+0x7f5/0x1580 [ 3059.441483][T29086] do_user_addr_fault+0x609/0xbe0 17:32:43 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) getpriority(0x1, r1) [ 3059.446501][T29086] exc_page_fault+0x91/0x220 [ 3059.451092][T29086] asm_exc_page_fault+0x1e/0x30 [ 3059.455945][T29086] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3059.461662][T29086] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3059.481351][T29086] RSP: 0018:ffffc90001fb3e80 EFLAGS: 00050293 [ 3059.487416][T29086] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xa}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3059.495385][T29086] RDX: ffff888171722040 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3059.503363][T29086] RBP: 0000000000000001 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3059.511327][T29086] R10: 0001888124df4387 R11: 0000000000000000 R12: 0000000000000001 [ 3059.519395][T29086] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3059.527403][T29086] ? __sys_socketpair+0xa8/0x810 [ 3059.532354][T29086] __sys_socketpair+0xc4/0x810 [ 3059.537193][T29086] __x64_sys_socketpair+0x4e/0x60 [ 3059.542744][T29086] do_syscall_64+0x44/0xa0 17:32:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2000000, 0x0, &(0x7f0000000000)) [ 3059.547259][T29086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3059.553245][T29086] RIP: 0033:0x7f675c661709 [ 3059.557651][T29086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.577258][T29086] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3059.585674][T29086] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 17:32:43 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) fork() [ 3059.593656][T29086] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3059.601777][T29086] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3059.609740][T29086] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3059.617712][T29086] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xb}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:43 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) shmdt(r0) shmdt(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffe00}]}, 0x24}, 0x1, 0x0, 0x0, 0x18}, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) read$usbmon(r2, &(0x7f0000000100)=""/55, 0x37) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x543e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fd28954}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbd9b6ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x398ea9a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47bc1f2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ef1336}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1193fb9b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c26d332}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ec6f716}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x538152bf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f170ae7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x6bff5cac081968b8) 17:32:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x3000000, 0x0, &(0x7f0000000000)) 17:32:43 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 5) 17:32:43 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) waitid(0x1, r1, 0x0, 0x2, 0x0) [ 3059.746291][T29123] FAULT_INJECTION: forcing a failure. [ 3059.746291][T29123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3059.759654][T29123] CPU: 0 PID: 29123 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3059.768509][T29123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3059.782034][T29123] Call Trace: [ 3059.785314][T29123] dump_stack_lvl+0xd6/0x122 [ 3059.789960][T29123] dump_stack+0x11/0x1b [ 3059.794116][T29123] should_fail+0x23c/0x250 [ 3059.798594][T29123] __alloc_pages+0x102/0x320 [ 3059.803217][T29123] alloc_pages_vma+0x5ee/0x770 [ 3059.807979][T29123] do_anonymous_page+0x16e/0x8b0 [ 3059.812909][T29123] ? __pmd_alloc+0x301/0x340 [ 3059.817497][T29123] handle_mm_fault+0x7f5/0x1580 [ 3059.822340][T29123] do_user_addr_fault+0x609/0xbe0 [ 3059.827443][T29123] exc_page_fault+0x91/0x220 [ 3059.832132][T29123] asm_exc_page_fault+0x1e/0x30 [ 3059.836988][T29123] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3059.842962][T29123] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3059.862559][T29123] RSP: 0018:ffffc9000200fe80 EFLAGS: 00050293 [ 3059.868715][T29123] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3059.876679][T29123] RDX: ffff8881830dd040 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3059.884641][T29123] RBP: 0000000000000001 R08: ffffffff82480f78 R09: 0001ffff836341df [ 3059.892605][T29123] R10: 0001888124df4387 R11: 0000000000000000 R12: 0000000000000001 [ 3059.900569][T29123] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3059.908537][T29123] ? __sys_socketpair+0xa8/0x810 [ 3059.913558][T29123] __sys_socketpair+0xc4/0x810 [ 3059.918322][T29123] __x64_sys_socketpair+0x4e/0x60 [ 3059.923418][T29123] do_syscall_64+0x44/0xa0 [ 3059.927988][T29123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3059.933935][T29123] RIP: 0033:0x7f675c661709 [ 3059.938350][T29123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.957974][T29123] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3059.966383][T29123] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3059.974355][T29123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3059.982320][T29123] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 17:32:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4000000, 0x0, &(0x7f0000000000)) 17:32:43 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) fork() 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xc}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:43 executing program 3: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xd}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:43 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x5000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r1, 0x3) shmdt(r0) shmdt(r0) 17:32:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x5000000, 0x0, &(0x7f0000000000)) [ 3059.990287][T29123] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3059.998422][T29123] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:43 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xe}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:43 executing program 3: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffc) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17:32:43 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 6) 17:32:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6000000, 0x0, &(0x7f0000000000)) [ 3060.124742][T29155] FAULT_INJECTION: forcing a failure. [ 3060.124742][T29155] name failslab, interval 1, probability 0, space 0, times 0 [ 3060.137382][T29155] CPU: 1 PID: 29155 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3060.146160][T29155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.156279][T29155] Call Trace: [ 3060.159551][T29155] dump_stack_lvl+0xd6/0x122 [ 3060.164211][T29155] dump_stack+0x11/0x1b [ 3060.168363][T29155] should_fail+0x23c/0x250 [ 3060.172794][T29155] ? sock_alloc_inode+0x23/0x90 [ 3060.177649][T29155] __should_failslab+0x81/0x90 [ 3060.182404][T29155] ? sockfs_init_fs_context+0x70/0x70 [ 3060.187764][T29155] should_failslab+0x5/0x20 [ 3060.192264][T29155] kmem_cache_alloc+0x4f/0x300 [ 3060.197046][T29155] ? sockfs_init_fs_context+0x70/0x70 [ 3060.202418][T29155] sock_alloc_inode+0x23/0x90 [ 3060.207075][T29155] ? sockfs_init_fs_context+0x70/0x70 [ 3060.212427][T29155] new_inode_pseudo+0x38/0x1c0 [ 3060.217235][T29155] __sock_create+0x122/0x4e0 [ 3060.221819][T29155] __sys_socketpair+0x192/0x810 [ 3060.226648][T29155] __x64_sys_socketpair+0x4e/0x60 [ 3060.231697][T29155] do_syscall_64+0x44/0xa0 [ 3060.236113][T29155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3060.242001][T29155] RIP: 0033:0x7f675c661709 [ 3060.246396][T29155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3060.265983][T29155] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3060.274377][T29155] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3060.282348][T29155] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3060.290309][T29155] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3060.298276][T29155] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3060.306244][T29155] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3060.314265][T29155] socket: no more sockets 17:32:44 executing program 2: socketpair(0x3, 0x3, 0xa, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = getpgrp(0xffffffffffffffff) getpriority(0x1, r1) 17:32:44 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xf}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:44 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7000000, 0x0, &(0x7f0000000000)) 17:32:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = socket$inet6(0xa, 0x6, 0x7fffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 17:32:44 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) fork() 17:32:44 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 7) [ 3060.641797][T29175] FAULT_INJECTION: forcing a failure. [ 3060.641797][T29175] name failslab, interval 1, probability 0, space 0, times 0 [ 3060.656069][T29175] CPU: 0 PID: 29175 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3060.665794][T29175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.675844][T29175] Call Trace: [ 3060.679147][T29175] dump_stack_lvl+0xd6/0x122 [ 3060.683824][T29175] dump_stack+0x11/0x1b [ 3060.687980][T29175] should_fail+0x23c/0x250 [ 3060.692392][T29175] ? security_inode_alloc+0x30/0x180 [ 3060.697777][T29175] __should_failslab+0x81/0x90 [ 3060.702548][T29175] should_failslab+0x5/0x20 [ 3060.707084][T29175] kmem_cache_alloc+0x4f/0x300 [ 3060.711861][T29175] security_inode_alloc+0x30/0x180 [ 3060.716986][T29175] inode_init_always+0x20b/0x430 [ 3060.722183][T29175] ? sockfs_init_fs_context+0x70/0x70 [ 3060.727672][T29175] new_inode_pseudo+0x73/0x1c0 [ 3060.732704][T29175] __sock_create+0x122/0x4e0 [ 3060.737376][T29175] __sys_socketpair+0x192/0x810 [ 3060.742663][T29175] __x64_sys_socketpair+0x4e/0x60 [ 3060.747689][T29175] do_syscall_64+0x44/0xa0 [ 3060.752126][T29175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3060.758026][T29175] RIP: 0033:0x7f675c661709 [ 3060.762645][T29175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3060.782347][T29175] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:44 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:44 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x10}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:44 executing program 2: r0 = getpgrp(0xffffffffffffffff) waitid(0x2, r0, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x10000000) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) getpriority(0x2, r2) getpriority(0x1, r0) 17:32:44 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x8000000, 0x0, &(0x7f0000000000)) 17:32:44 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) [ 3060.790889][T29175] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3060.798864][T29175] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3060.806832][T29175] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3060.814836][T29175] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3060.822815][T29175] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3060.830859][T29175] socket: no more sockets 17:32:44 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x9000000, 0x0, &(0x7f0000000000)) 17:32:44 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x11}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:44 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:44 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 8) 17:32:44 executing program 3: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f0000000080)={0x216c, 0x12, 0x200, 0x70bd28, 0x25dfdbfc, {0xf, 0x9, 0x7, 0x2, {0x4e23, 0x4e21, [0x1, 0x0, 0xeb, 0x3], [0xaa8, 0x9, 0x0, 0x46ee], 0x0, [0x7ff, 0x2]}, 0xffff7fff, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x59, 0x1, "f23b0ab330a74e1c2536023109ecd94efa093ee7de78bd2e94236a70708e7121bdc87b78772ac00131e2bd216b4eb8f82584b0fa1c3def246f52011e4ce1e241aec85cedd6541478e5c4e7ce0e240f7f78e3ad1b21"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "5a0ed12b94f737b1313fcb135edebfccb767cfdee27eb92e55ed83e4f68a3315fa2d0b0c34eb868fad3ba31640a84b35e55c4d2931fcf1511f94ba2594be2b06ff7f14a8b92bc6456a005c38e8ab91e0d69af2bbc0cbb9f23f6996531e"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "06f64f9b0e1094c2fdb9b762928b9c1241b8484eb0f9dd6e1d6ea7738b75aa28f59b18dd65625a9b499ac6f109fc1dccb3464bbbc7af55fc0cd58c0b5e11835332da31d4f9343220c57e28304f94199ce19287"}]}, 0x216c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x2800) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) 17:32:44 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xa000000, 0x0, &(0x7f0000000000)) 17:32:44 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:44 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x12}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:44 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmdt(0x0) [ 3061.007309][T29213] FAULT_INJECTION: forcing a failure. [ 3061.007309][T29213] name failslab, interval 1, probability 0, space 0, times 0 [ 3061.019970][T29213] CPU: 0 PID: 29213 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3061.028727][T29213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.038783][T29213] Call Trace: [ 3061.042061][T29213] dump_stack_lvl+0xd6/0x122 [ 3061.046674][T29213] dump_stack+0x11/0x1b [ 3061.050950][T29213] should_fail+0x23c/0x250 [ 3061.055366][T29213] ? sk_prot_alloc+0x41/0x190 [ 3061.060038][T29213] __should_failslab+0x81/0x90 [ 3061.064821][T29213] should_failslab+0x5/0x20 [ 3061.069328][T29213] kmem_cache_alloc+0x4f/0x300 [ 3061.074086][T29213] sk_prot_alloc+0x41/0x190 [ 3061.078614][T29213] sk_alloc+0x2e/0x220 [ 3061.082676][T29213] unix_create1+0x93/0x3d0 [ 3061.087095][T29213] unix_create+0xf8/0x110 [ 3061.091465][T29213] __sock_create+0x2c7/0x4e0 [ 3061.096118][T29213] __sys_socketpair+0x192/0x810 [ 3061.101026][T29213] __x64_sys_socketpair+0x4e/0x60 [ 3061.106076][T29213] do_syscall_64+0x44/0xa0 [ 3061.110495][T29213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3061.116417][T29213] RIP: 0033:0x7f675c661709 [ 3061.120824][T29213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3061.140426][T29213] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3061.148843][T29213] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3061.157189][T29213] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3061.165253][T29213] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3061.173223][T29213] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3061.181191][T29213] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:45 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) shmget(0x1, 0x2000, 0x80, &(0x7f0000ffa000/0x2000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xb000000, 0x0, &(0x7f0000000000)) 17:32:45 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x13}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:45 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 9) 17:32:45 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0xf1, 0x7f, 0x1, 0x0, 0x81, 0x4a000, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x80c0, 0x7, 0x1000, 0x8, 0x10001, 0x400, 0x7ff, 0x0, 0x101, 0x0, 0x10000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0xd9, 0x81, 0x3, 0x0, 0xffffffffffffffc0, 0x4f925, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x100, 0x1ff, 0x80000000, 0x0, 0x5, 0xffff, 0xff, 0x0, 0x0, 0x0, 0x9e40}, 0x0, 0x3, r2, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000380)) getpriority(0x1, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000880)) r5 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1accce723999a12d988fb7837e4d98abcaa0ef67a99b0d2208bd7beeb120dc02b73131f20072fbeb18e453b34e037fae2d5ee9d7ced4fc833ee214572164ed1551385f0793d6b760b782ba8c6db93e45d35e0e", @ANYRES16=r6, @ANYBLOB="000000000000000000003600000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x10) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000400)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000008c0)=""/4096, 0x1000}) 17:32:45 executing program 4: shmget(0x1, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xc000000, 0x0, &(0x7f0000000000)) 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x132}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3061.787301][T29238] FAULT_INJECTION: forcing a failure. [ 3061.787301][T29238] name failslab, interval 1, probability 0, space 0, times 0 [ 3061.800101][T29238] CPU: 0 PID: 29238 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3061.808878][T29238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.818962][T29238] Call Trace: [ 3061.822265][T29238] dump_stack_lvl+0xd6/0x122 [ 3061.826859][T29238] dump_stack+0x11/0x1b [ 3061.831013][T29238] should_fail+0x23c/0x250 [ 3061.835427][T29238] __should_failslab+0x81/0x90 [ 3061.840191][T29238] ? selinux_sk_alloc_security+0x61/0x120 [ 3061.845901][T29238] should_failslab+0x5/0x20 [ 3061.850401][T29238] kmem_cache_alloc_trace+0x52/0x320 [ 3061.855683][T29238] ? should_fail+0xd6/0x250 [ 3061.860280][T29238] selinux_sk_alloc_security+0x61/0x120 [ 3061.865863][T29238] security_sk_alloc+0x45/0x90 [ 3061.870621][T29238] sk_prot_alloc+0xd2/0x190 [ 3061.875142][T29238] sk_alloc+0x2e/0x220 [ 3061.879202][T29238] unix_create1+0x93/0x3d0 17:32:45 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) [ 3061.883742][T29238] unix_create+0xf8/0x110 [ 3061.888065][T29238] __sock_create+0x2c7/0x4e0 [ 3061.892657][T29238] __sys_socketpair+0x192/0x810 [ 3061.897509][T29238] __x64_sys_socketpair+0x4e/0x60 [ 3061.902555][T29238] do_syscall_64+0x44/0xa0 [ 3061.906981][T29238] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3061.912955][T29238] RIP: 0033:0x7f675c661709 [ 3061.917544][T29238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:45 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r0 = io_uring_setup(0x246c, &(0x7f0000000000)={0x0, 0x3117, 0x4, 0x1, 0x1ef}) syz_io_uring_setup(0x68e0, &(0x7f0000000080)={0x0, 0x3656, 0x10, 0x0, 0x11b, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r1 = shmget(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x0) [ 3061.937155][T29238] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3061.945654][T29238] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3061.953632][T29238] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3061.962042][T29238] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3061.970104][T29238] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3061.978194][T29238] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xd000000, 0x0, &(0x7f0000000000)) 17:32:45 executing program 4: prctl$PR_GET_TSC(0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:45 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x1, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) 17:32:45 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x8, 0x9, 0x7f, 0x0, 0x432, 0x10a80, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x10042, 0x81c, 0xffffff80, 0x6, 0x9, 0x37, 0x2, 0x0, 0xffff, 0x0, 0x4}, r1, 0xd, 0xffffffffffffffff, 0x0) getpriority(0x1, r0) 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x300}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:45 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 10) 17:32:45 executing program 4: prctl$PR_GET_TSC(0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x101800) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x2010, r2, 0x8001) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x20, 0x0, 0x20, 0x0, "ee446c7f363da73cd0f1640fb386c1ef55d4c446169ed5175cfed9cd023f4a3f364b1998ba3c2038457a9e9418b49816bd3250a8e5f10d61781264ad642033b5", "1bd267527c4bf1f9dd95c78feb68c06d8833fce16e4f117ff49da931e9d20353", [0x1, 0x10000]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) socketpair(0x6, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 17:32:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xe000000, 0x0, &(0x7f0000000000)) 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x500}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3062.148354][T29285] FAULT_INJECTION: forcing a failure. [ 3062.148354][T29285] name failslab, interval 1, probability 0, space 0, times 0 [ 3062.161179][T29285] CPU: 0 PID: 29285 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3062.169945][T29285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3062.179998][T29285] Call Trace: [ 3062.183272][T29285] dump_stack_lvl+0xd6/0x122 [ 3062.187874][T29285] dump_stack+0x11/0x1b [ 3062.192022][T29285] should_fail+0x23c/0x250 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x600}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3062.196429][T29285] ? sock_alloc_inode+0x23/0x90 [ 3062.201280][T29285] __should_failslab+0x81/0x90 [ 3062.206055][T29285] ? sockfs_init_fs_context+0x70/0x70 [ 3062.211488][T29285] should_failslab+0x5/0x20 [ 3062.215988][T29285] kmem_cache_alloc+0x4f/0x300 [ 3062.220810][T29285] ? sockfs_init_fs_context+0x70/0x70 [ 3062.226255][T29285] sock_alloc_inode+0x23/0x90 [ 3062.231104][T29285] ? sockfs_init_fs_context+0x70/0x70 [ 3062.236592][T29285] new_inode_pseudo+0x38/0x1c0 [ 3062.241399][T29285] __sock_create+0x122/0x4e0 17:32:45 executing program 4: prctl$PR_GET_TSC(0x19, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xf000000, 0x0, &(0x7f0000000000)) [ 3062.245987][T29285] __sys_socketpair+0x1dc/0x810 [ 3062.250868][T29285] __x64_sys_socketpair+0x4e/0x60 [ 3062.255908][T29285] do_syscall_64+0x44/0xa0 [ 3062.260333][T29285] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3062.266230][T29285] RIP: 0033:0x7f675c661709 [ 3062.270639][T29285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.290293][T29285] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:45 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) [ 3062.298706][T29285] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3062.306673][T29285] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3062.314642][T29285] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.322602][T29285] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3062.330657][T29285] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3062.338776][T29285] socket: no more sockets 17:32:45 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x700}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:46 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0x4, 0x40, 0x6, 0x2, 0x0, 0x8, 0x2, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000200), 0xb}, 0x240, 0x8000000000000000, 0x7fff, 0x2, 0x5, 0x1, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0x63, 0x7, 0x0, 0x444, 0x60, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x9, 0x1}, 0x40, 0xfffffffffffffbdb, 0x3, 0x3, 0x400, 0x3, 0x81, 0x0, 0x8, 0x0, 0x7fff}, r0, 0xd, r1, 0xa) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10100) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x2, 0x4, 0x52}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000000c0)={0xdc, 0x78f5, 0x0, 'queue0\x00', 0x80}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000002c0)={0x7, 0x2, {0xfffffffffffffffd, 0x3, 0x4, 0x3, 0x6}, 0xffff}) 17:32:46 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x10000000, 0x0, &(0x7f0000000000)) 17:32:46 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 11) 17:32:46 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x900}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:46 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) (fail_nth: 1) 17:32:46 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) [ 3063.009932][T29316] FAULT_INJECTION: forcing a failure. [ 3063.009932][T29316] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.022581][T29316] CPU: 0 PID: 29316 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 3063.028807][T29323] FAULT_INJECTION: forcing a failure. [ 3063.028807][T29323] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.031384][T29316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.031396][T29316] Call Trace: [ 3063.031404][T29316] dump_stack_lvl+0xd6/0x122 [ 3063.061896][T29316] dump_stack+0x11/0x1b [ 3063.066041][T29316] should_fail+0x23c/0x250 [ 3063.070534][T29316] __should_failslab+0x81/0x90 [ 3063.075280][T29316] ? do_shmat+0x404/0x9c0 [ 3063.079667][T29316] should_failslab+0x5/0x20 [ 3063.084192][T29316] kmem_cache_alloc_trace+0x52/0x320 [ 3063.089460][T29316] do_shmat+0x404/0x9c0 [ 3063.093666][T29316] __x64_sys_shmat+0x60/0xb0 [ 3063.098239][T29316] do_syscall_64+0x44/0xa0 [ 3063.102681][T29316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3063.108561][T29316] RIP: 0033:0x7f5273adb709 [ 3063.112963][T29316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.132758][T29316] RSP: 002b:00007f5271853188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 3063.141167][T29316] RAX: ffffffffffffffda RBX: 00007f5273bdff60 RCX: 00007f5273adb709 [ 3063.149183][T29316] RDX: 0000000000000000 RSI: 0000000020ffa000 RDI: 0000000000000000 [ 3063.157297][T29316] RBP: 00007f52718531d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.165251][T29316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3063.173336][T29316] R13: 00007ffcb088d4ff R14: 00007f5271853300 R15: 0000000000022000 [ 3063.181392][T29323] CPU: 1 PID: 29323 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3063.190163][T29323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.200480][T29323] Call Trace: [ 3063.203755][T29323] dump_stack_lvl+0xd6/0x122 [ 3063.208443][T29323] dump_stack+0x11/0x1b [ 3063.212676][T29323] should_fail+0x23c/0x250 [ 3063.217087][T29323] ? security_inode_alloc+0x30/0x180 [ 3063.222369][T29323] __should_failslab+0x81/0x90 [ 3063.227132][T29323] should_failslab+0x5/0x20 [ 3063.231843][T29323] kmem_cache_alloc+0x4f/0x300 [ 3063.236603][T29323] security_inode_alloc+0x30/0x180 [ 3063.241726][T29323] inode_init_always+0x20b/0x430 [ 3063.246725][T29323] ? sockfs_init_fs_context+0x70/0x70 [ 3063.252146][T29323] new_inode_pseudo+0x73/0x1c0 [ 3063.256912][T29323] __sock_create+0x122/0x4e0 [ 3063.261498][T29323] __sys_socketpair+0x1dc/0x810 [ 3063.266379][T29323] __x64_sys_socketpair+0x4e/0x60 [ 3063.271409][T29323] do_syscall_64+0x44/0xa0 [ 3063.275869][T29323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3063.281834][T29323] RIP: 0033:0x7f675c661709 [ 3063.286239][T29323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:32:46 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x11000000, 0x0, &(0x7f0000000000)) 17:32:46 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) (fail_nth: 2) [ 3063.306027][T29323] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3063.314531][T29323] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3063.322577][T29323] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3063.330544][T29323] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.338512][T29323] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3063.346493][T29323] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3063.354521][T29323] socket: no more sockets [ 3063.367161][T29329] FAULT_INJECTION: forcing a failure. [ 3063.367161][T29329] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.380080][T29329] CPU: 1 PID: 29329 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 3063.388839][T29329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.398889][T29329] Call Trace: [ 3063.402162][T29329] dump_stack_lvl+0xd6/0x122 [ 3063.406759][T29329] dump_stack+0x11/0x1b [ 3063.410983][T29329] should_fail+0x23c/0x250 [ 3063.415402][T29329] ? __alloc_file+0x2e/0x1a0 [ 3063.420062][T29329] __should_failslab+0x81/0x90 [ 3063.424896][T29329] should_failslab+0x5/0x20 [ 3063.429574][T29329] kmem_cache_alloc+0x4f/0x300 [ 3063.434344][T29329] __alloc_file+0x2e/0x1a0 [ 3063.438766][T29329] alloc_empty_file+0xcd/0x1c0 [ 3063.443546][T29329] alloc_file+0x3a/0x280 [ 3063.447898][T29329] alloc_file_clone+0x1f/0x70 [ 3063.452578][T29329] do_shmat+0x45c/0x9c0 [ 3063.456817][T29329] __x64_sys_shmat+0x60/0xb0 [ 3063.461405][T29329] do_syscall_64+0x44/0xa0 [ 3063.466002][T29329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3063.471901][T29329] RIP: 0033:0x7f5273adb709 [ 3063.476311][T29329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.496000][T29329] RSP: 002b:00007f5271853188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 3063.504413][T29329] RAX: ffffffffffffffda RBX: 00007f5273bdff60 RCX: 00007f5273adb709 17:32:46 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = fork() r3 = getpgrp(r2) getpriority(0x1, r3) 17:32:46 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xa00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xb00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xc00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 12) [ 3063.512386][T29329] RDX: 0000000000000000 RSI: 0000000020ffa000 RDI: 0000000000000000 [ 3063.520351][T29329] RBP: 00007f52718531d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.528520][T29329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3063.536613][T29329] R13: 00007ffcb088d4ff R14: 00007f5271853300 R15: 0000000000022000 17:32:47 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) (fail_nth: 3) 17:32:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x12000000, 0x0, &(0x7f0000000000)) [ 3063.625486][T29350] FAULT_INJECTION: forcing a failure. [ 3063.625486][T29350] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.638130][T29350] CPU: 0 PID: 29350 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3063.646897][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.657047][T29350] Call Trace: [ 3063.660323][T29350] dump_stack_lvl+0xd6/0x122 [ 3063.664926][T29350] dump_stack+0x11/0x1b [ 3063.669108][T29350] should_fail+0x23c/0x250 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xd00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2d000000, 0x0, &(0x7f0000000000)) [ 3063.673523][T29350] ? sk_prot_alloc+0x41/0x190 [ 3063.678201][T29350] __should_failslab+0x81/0x90 [ 3063.683001][T29350] should_failslab+0x5/0x20 [ 3063.687510][T29350] kmem_cache_alloc+0x4f/0x300 [ 3063.692298][T29350] sk_prot_alloc+0x41/0x190 [ 3063.696847][T29350] sk_alloc+0x2e/0x220 [ 3063.700909][T29350] unix_create1+0x93/0x3d0 [ 3063.705326][T29350] unix_create+0xf8/0x110 [ 3063.709686][T29350] __sock_create+0x2c7/0x4e0 [ 3063.714280][T29350] __sys_socketpair+0x1dc/0x810 [ 3063.719155][T29350] __x64_sys_socketpair+0x4e/0x60 17:32:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x600, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x4894) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}}, 0x4aeef488dbf97b3e) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xc0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x14) 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xe00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x40000000, 0x0, &(0x7f0000000000)) [ 3063.724183][T29350] do_syscall_64+0x44/0xa0 [ 3063.728597][T29350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3063.734494][T29350] RIP: 0033:0x7f675c661709 [ 3063.738937][T29350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.758579][T29350] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3063.766992][T29350] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3063.774968][T29350] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3063.782943][T29350] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.790935][T29350] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3063.798902][T29350] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3063.816119][T29366] FAULT_INJECTION: forcing a failure. [ 3063.816119][T29366] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.828736][T29366] CPU: 0 PID: 29366 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 3063.837498][T29366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.847548][T29366] Call Trace: [ 3063.850818][T29366] dump_stack_lvl+0xd6/0x122 [ 3063.855444][T29366] dump_stack+0x11/0x1b [ 3063.859595][T29366] should_fail+0x23c/0x250 [ 3063.864038][T29366] ? security_file_alloc+0x30/0x190 [ 3063.869236][T29366] __should_failslab+0x81/0x90 [ 3063.874143][T29366] should_failslab+0x5/0x20 [ 3063.878644][T29366] kmem_cache_alloc+0x4f/0x300 [ 3063.883457][T29366] security_file_alloc+0x30/0x190 [ 3063.888485][T29366] __alloc_file+0x83/0x1a0 [ 3063.892935][T29366] alloc_empty_file+0xcd/0x1c0 [ 3063.897704][T29366] alloc_file+0x3a/0x280 [ 3063.901947][T29366] alloc_file_clone+0x1f/0x70 [ 3063.906666][T29366] do_shmat+0x45c/0x9c0 [ 3063.910859][T29366] __x64_sys_shmat+0x60/0xb0 [ 3063.915443][T29366] do_syscall_64+0x44/0xa0 [ 3063.919868][T29366] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3063.925871][T29366] RIP: 0033:0x7f5273adb709 [ 3063.930285][T29366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.949890][T29366] RSP: 002b:00007f5271853188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 3063.958309][T29366] RAX: ffffffffffffffda RBX: 00007f5273bdff60 RCX: 00007f5273adb709 [ 3063.966349][T29366] RDX: 0000000000000000 RSI: 0000000020ffa000 RDI: 0000000000000000 [ 3063.974325][T29366] RBP: 00007f52718531d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.982654][T29366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3063.990613][T29366] R13: 00007ffcb088d4ff R14: 00007f5271853300 R15: 0000000000022000 17:32:47 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x2, r0) getpgrp(r0) pidfd_open(r0, 0x0) 17:32:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x48000000, 0x0, &(0x7f0000000000)) 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xf00}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 13) 17:32:47 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmget(0x3, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) 17:32:47 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) (fail_nth: 4) [ 3064.292637][T29394] FAULT_INJECTION: forcing a failure. [ 3064.292637][T29394] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.305289][T29394] CPU: 1 PID: 29394 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3064.314052][T29394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.324110][T29394] Call Trace: [ 3064.327419][T29394] dump_stack_lvl+0xd6/0x122 [ 3064.332022][T29394] dump_stack+0x11/0x1b [ 3064.336183][T29394] should_fail+0x23c/0x250 17:32:47 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1100}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:47 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) [ 3064.340593][T29394] __should_failslab+0x81/0x90 [ 3064.345356][T29394] ? selinux_sk_alloc_security+0x61/0x120 [ 3064.351071][T29394] should_failslab+0x5/0x20 [ 3064.355576][T29394] kmem_cache_alloc_trace+0x52/0x320 [ 3064.360860][T29394] ? should_fail+0xd6/0x250 [ 3064.365484][T29394] selinux_sk_alloc_security+0x61/0x120 [ 3064.371030][T29394] security_sk_alloc+0x45/0x90 [ 3064.375788][T29394] sk_prot_alloc+0xd2/0x190 [ 3064.380288][T29394] sk_alloc+0x2e/0x220 [ 3064.384350][T29394] unix_create1+0x93/0x3d0 [ 3064.388782][T29394] unix_create+0xf8/0x110 17:32:48 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1200}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3064.393149][T29394] __sock_create+0x2c7/0x4e0 [ 3064.397739][T29394] __sys_socketpair+0x1dc/0x810 [ 3064.402665][T29394] __x64_sys_socketpair+0x4e/0x60 [ 3064.407797][T29394] do_syscall_64+0x44/0xa0 [ 3064.412213][T29394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3064.418194][T29394] RIP: 0033:0x7f675c661709 [ 3064.422707][T29394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.442367][T29394] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3064.450787][T29394] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3064.458942][T29394] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3064.466927][T29394] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.474985][T29394] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3064.482948][T29394] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 [ 3064.494605][T29398] FAULT_INJECTION: forcing a failure. [ 3064.494605][T29398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3064.507683][T29398] CPU: 0 PID: 29398 Comm: syz-executor.4 Not tainted 5.15.0-rc3-syzkaller #0 [ 3064.516530][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.526588][T29398] Call Trace: [ 3064.529863][T29398] dump_stack_lvl+0xd6/0x122 [ 3064.534474][T29398] dump_stack+0x11/0x1b [ 3064.538627][T29398] should_fail+0x23c/0x250 [ 3064.543037][T29398] should_fail_usercopy+0x16/0x20 [ 3064.548086][T29398] _copy_to_user+0x1c/0x90 [ 3064.552504][T29398] simple_read_from_buffer+0xab/0x120 [ 3064.557982][T29398] proc_fail_nth_read+0x10d/0x150 [ 3064.563011][T29398] ? proc_fault_inject_write+0x230/0x230 [ 3064.568710][T29398] vfs_read+0x1e6/0x750 [ 3064.573027][T29398] ? __fput+0x47a/0x520 [ 3064.577191][T29398] ? __fget_light+0x21b/0x260 [ 3064.581962][T29398] ? __cond_resched+0x11/0x40 [ 3064.586642][T29398] ksys_read+0xd9/0x190 [ 3064.590879][T29398] __x64_sys_read+0x3e/0x50 [ 3064.595384][T29398] do_syscall_64+0x44/0xa0 [ 3064.599811][T29398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3064.605899][T29398] RIP: 0033:0x7f5273a8e48c [ 3064.610312][T29398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3064.618368][T29414] FAULT_INJECTION: forcing a failure. [ 3064.618368][T29414] name failslab, interval 1, probability 0, space 0, times 0 17:32:48 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 14) 17:32:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4c000000, 0x0, &(0x7f0000000000)) 17:32:48 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1300}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:48 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) [ 3064.629917][T29398] RSP: 002b:00007f5271853170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3064.629942][T29398] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5273a8e48c [ 3064.629953][T29398] RDX: 000000000000000f RSI: 00007f52718531e0 RDI: 0000000000000003 [ 3064.629965][T29398] RBP: 00007f52718531d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.674769][T29398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3064.682845][T29398] R13: 00007ffcb088d4ff R14: 00007f5271853300 R15: 0000000000022000 [ 3064.690824][T29414] CPU: 1 PID: 29414 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3064.699581][T29414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.709841][T29414] Call Trace: [ 3064.713126][T29414] dump_stack_lvl+0xd6/0x122 [ 3064.717770][T29414] dump_stack+0x11/0x1b [ 3064.721936][T29414] should_fail+0x23c/0x250 [ 3064.726349][T29414] ? __d_alloc+0x36/0x370 [ 3064.730682][T29414] __should_failslab+0x81/0x90 [ 3064.735446][T29414] should_failslab+0x5/0x20 [ 3064.739947][T29414] kmem_cache_alloc+0x4f/0x300 17:32:48 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x68000000, 0x0, &(0x7f0000000000)) [ 3064.744709][T29414] __d_alloc+0x36/0x370 [ 3064.748884][T29414] ? selinux_socket_post_create+0x1de/0x270 [ 3064.754785][T29414] d_alloc_pseudo+0x1a/0x50 [ 3064.759358][T29414] alloc_file_pseudo+0x77/0x150 [ 3064.764319][T29414] sock_alloc_file+0x98/0x1b0 [ 3064.769002][T29414] __sys_socketpair+0x25f/0x810 [ 3064.773873][T29414] __x64_sys_socketpair+0x4e/0x60 [ 3064.778946][T29414] do_syscall_64+0x44/0xa0 [ 3064.783540][T29414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3064.789433][T29414] RIP: 0033:0x7f675c661709 17:32:48 executing program 3: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x406040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x810, r1, 0x10000000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r0) 17:32:48 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x3201}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3064.793845][T29414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.813457][T29414] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3064.821874][T29414] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3064.829847][T29414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3064.837908][T29414] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.845878][T29414] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3064.853858][T29414] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:48 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3f00) 17:32:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6c000000, 0x0, &(0x7f0000000000)) 17:32:48 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x7000) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x1000) shmdt(r1) 17:32:48 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x100000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:48 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000000) 17:32:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x74000000, 0x0, &(0x7f0000000000)) 17:32:48 executing program 2: socketpair(0x28, 0x0, 0x389, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80000) getpgrp(0xffffffffffffffff) r1 = fork() r2 = fork() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) wait4(r2, 0x0, 0x2, 0x0) getpgrp(r2) getpriority(0x1, r1) 17:32:48 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 15) [ 3065.376807][T29441] FAULT_INJECTION: forcing a failure. [ 3065.376807][T29441] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.389466][T29441] CPU: 0 PID: 29441 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3065.398225][T29441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.408288][T29441] Call Trace: [ 3065.412127][T29441] dump_stack_lvl+0xd6/0x122 [ 3065.416849][T29441] dump_stack+0x11/0x1b [ 3065.421005][T29441] should_fail+0x23c/0x250 [ 3065.425416][T29441] ? __alloc_file+0x2e/0x1a0 [ 3065.430058][T29441] __should_failslab+0x81/0x90 [ 3065.434898][T29441] should_failslab+0x5/0x20 [ 3065.439400][T29441] kmem_cache_alloc+0x4f/0x300 [ 3065.444159][T29441] __alloc_file+0x2e/0x1a0 [ 3065.448584][T29441] alloc_empty_file+0xcd/0x1c0 [ 3065.453351][T29441] alloc_file+0x3a/0x280 [ 3065.457669][T29441] alloc_file_pseudo+0xfa/0x150 [ 3065.462524][T29441] sock_alloc_file+0x98/0x1b0 [ 3065.467202][T29441] __sys_socketpair+0x25f/0x810 [ 3065.472062][T29441] __x64_sys_socketpair+0x4e/0x60 17:32:49 executing program 3: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x800, 0x70bd2b, 0x7fffffff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7c}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x0) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 17:32:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7a000000, 0x0, &(0x7f0000000000)) [ 3065.477085][T29441] do_syscall_64+0x44/0xa0 [ 3065.481506][T29441] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3065.487418][T29441] RIP: 0033:0x7f675c661709 [ 3065.491835][T29441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.511668][T29441] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:49 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:49 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3f000000) [ 3065.520120][T29441] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3065.528086][T29441] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3065.536053][T29441] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.544020][T29441] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3065.552137][T29441] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x80040000, 0x0, &(0x7f0000000000)) 17:32:49 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 16) 17:32:49 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:49 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x100000000000000) 17:32:49 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x2000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xcc020000, 0x0, &(0x7f0000000000)) [ 3065.691427][T29470] FAULT_INJECTION: forcing a failure. [ 3065.691427][T29470] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.704068][T29470] CPU: 1 PID: 29470 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3065.713091][T29470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.723331][T29470] Call Trace: [ 3065.726607][T29470] dump_stack_lvl+0xd6/0x122 [ 3065.731198][T29470] dump_stack+0x11/0x1b [ 3065.735361][T29470] should_fail+0x23c/0x250 [ 3065.739772][T29470] ? security_file_alloc+0x30/0x190 [ 3065.745093][T29470] __should_failslab+0x81/0x90 [ 3065.750027][T29470] should_failslab+0x5/0x20 [ 3065.754526][T29470] kmem_cache_alloc+0x4f/0x300 [ 3065.759288][T29470] security_file_alloc+0x30/0x190 [ 3065.764308][T29470] __alloc_file+0x83/0x1a0 [ 3065.768816][T29470] alloc_empty_file+0xcd/0x1c0 [ 3065.773580][T29470] alloc_file+0x3a/0x280 [ 3065.777825][T29470] alloc_file_pseudo+0xfa/0x150 [ 3065.782724][T29470] sock_alloc_file+0x98/0x1b0 [ 3065.787397][T29470] __sys_socketpair+0x25f/0x810 [ 3065.792244][T29470] __x64_sys_socketpair+0x4e/0x60 [ 3065.797270][T29470] do_syscall_64+0x44/0xa0 [ 3065.801722][T29470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3065.807698][T29470] RIP: 0033:0x7f675c661709 [ 3065.812108][T29470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.831718][T29470] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3065.840307][T29470] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3065.848385][T29470] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3065.856446][T29470] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.864481][T29470] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3065.872555][T29470] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:49 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0xa1}, {0x81, 0x94}, 0xce3, 0x7, 0x2}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) 17:32:49 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3f00000000000000) 17:32:49 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x3000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:49 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xfeffffff, 0x0, &(0x7f0000000000)) 17:32:49 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 17) 17:32:50 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x4000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:50 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0xffffffff00000000) [ 3066.373076][T29497] FAULT_INJECTION: forcing a failure. [ 3066.373076][T29497] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.385815][T29497] CPU: 0 PID: 29497 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3066.394578][T29497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3066.404634][T29497] Call Trace: [ 3066.407916][T29497] dump_stack_lvl+0xd6/0x122 [ 3066.412509][T29497] dump_stack+0x11/0x1b [ 3066.416661][T29497] should_fail+0x23c/0x250 17:32:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xfffffffe, 0x0, &(0x7f0000000000)) 17:32:50 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x101301, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1260, 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000200)={0x6, 0x2, 'client0\x00', 0x5, "0680682860597737", "69b280f795ef02798a98221ece0dcca7d5f4fa13c9300fd4f0a22a9aa3d2ab05", 0x1, 0x3ff}) socketpair(0x29, 0x4, 0x9, &(0x7f0000000100)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4840) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000040)={0x20, 0x3ff, 0x0, 'queue1\x00', 0x7}) [ 3066.421077][T29497] ? __d_alloc+0x36/0x370 [ 3066.425477][T29497] __should_failslab+0x81/0x90 [ 3066.430242][T29497] should_failslab+0x5/0x20 [ 3066.434747][T29497] kmem_cache_alloc+0x4f/0x300 [ 3066.439504][T29497] ? security_file_alloc+0x12e/0x190 [ 3066.444800][T29497] __d_alloc+0x36/0x370 [ 3066.448968][T29497] d_alloc_pseudo+0x1a/0x50 [ 3066.453473][T29497] alloc_file_pseudo+0x77/0x150 [ 3066.458322][T29497] sock_alloc_file+0x98/0x1b0 [ 3066.463004][T29497] __sys_socketpair+0x2c8/0x810 [ 3066.467856][T29497] __x64_sys_socketpair+0x4e/0x60 17:32:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1000000000000, 0x0, &(0x7f0000000000)) [ 3066.472882][T29497] do_syscall_64+0x44/0xa0 [ 3066.477372][T29497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3066.483268][T29497] RIP: 0033:0x7f675c661709 [ 3066.487676][T29497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.507447][T29497] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3066.515862][T29497] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3066.523845][T29497] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3066.531842][T29497] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.539810][T29497] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3066.547802][T29497] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x20000000000000, 0x0, &(0x7f0000000000)) 17:32:50 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = getpgrp(r1) getpriority(0x1, r2) 17:32:50 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 18) 17:32:50 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000001, 0x110, 0xffffffffffffffff, 0x8000000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 17:32:50 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x5000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x100000000000000, 0x0, &(0x7f0000000000)) 17:32:50 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e60d24a7ed4255efa1297d1e30369bde", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbcd25100000000500110005060000000c000600797cf092cad13836bc57358865016633a400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0xe00, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 17:32:50 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4090}, 0x30004881) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmget(0x0, 0x4000, 0x54000008, &(0x7f0000ffa000/0x4000)=nil) [ 3067.251068][T29538] FAULT_INJECTION: forcing a failure. [ 3067.251068][T29538] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.263898][T29538] CPU: 0 PID: 29538 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3067.272667][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3067.282762][T29538] Call Trace: [ 3067.286036][T29538] dump_stack_lvl+0xd6/0x122 [ 3067.290646][T29538] dump_stack+0x11/0x1b [ 3067.294793][T29538] should_fail+0x23c/0x250 17:32:50 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x6000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:50 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) [ 3067.299204][T29538] ? __alloc_file+0x2e/0x1a0 [ 3067.303793][T29538] __should_failslab+0x81/0x90 [ 3067.308549][T29538] should_failslab+0x5/0x20 [ 3067.313098][T29538] kmem_cache_alloc+0x4f/0x300 [ 3067.317873][T29538] __alloc_file+0x2e/0x1a0 [ 3067.322302][T29538] alloc_empty_file+0xcd/0x1c0 [ 3067.327180][T29538] alloc_file+0x3a/0x280 [ 3067.331505][T29538] alloc_file_pseudo+0xfa/0x150 [ 3067.336436][T29538] sock_alloc_file+0x98/0x1b0 [ 3067.341120][T29538] __sys_socketpair+0x2c8/0x810 [ 3067.345973][T29538] __x64_sys_socketpair+0x4e/0x60 17:32:50 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) [ 3067.350995][T29538] do_syscall_64+0x44/0xa0 [ 3067.355483][T29538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3067.361378][T29538] RIP: 0033:0x7f675c661709 [ 3067.365876][T29538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.385566][T29538] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x200000000000000, 0x0, &(0x7f0000000000)) [ 3067.393979][T29538] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3067.402079][T29538] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3067.410054][T29538] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.418049][T29538] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3067.426018][T29538] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:51 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x7000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:51 executing program 3: r0 = shmget(0x1, 0x10000, 0x4, &(0x7f0000ff0000/0x10000)=nil) shmget(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) 17:32:51 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000040)={0xa4fc, 0xffff8000, 0x1, 'queue1\x00', 0x2}) 17:32:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x300000000000000, 0x0, &(0x7f0000000000)) 17:32:51 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x8000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:51 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 19) [ 3068.139830][T29568] FAULT_INJECTION: forcing a failure. [ 3068.139830][T29568] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.152587][T29568] CPU: 0 PID: 29568 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3068.161349][T29568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.171466][T29568] Call Trace: [ 3068.174748][T29568] dump_stack_lvl+0xd6/0x122 [ 3068.179348][T29568] dump_stack+0x11/0x1b [ 3068.183503][T29568] should_fail+0x23c/0x250 17:32:51 executing program 2: r0 = getpgrp(0xffffffffffffffff) pidfd_open(r0, 0x0) getpriority(0x1, r0) r1 = fork() r2 = fork() wait4(r2, 0x0, 0x2, 0x0) getpriority(0x1, r2) wait4(r1, 0x0, 0x1, 0x0) waitid(0x2, r0, &(0x7f0000000180), 0x1, &(0x7f0000000080)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fddbdf250100000014000900ff02000000000000000000000000000f060001004e24000008000beda8749d426f8fbd23e685eecf7001514b58f2a591bb2f6a6d9a81e1ee7604a9165690157ee0229dcd3cd1b878488c29d1", @ANYRES32=0x0, @ANYBLOB="080006000a4ec144ea8b5df2c848d260"], 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x10) [ 3068.187926][T29568] ? security_file_alloc+0x30/0x190 [ 3068.193164][T29568] __should_failslab+0x81/0x90 [ 3068.197983][T29568] should_failslab+0x5/0x20 [ 3068.202687][T29568] kmem_cache_alloc+0x4f/0x300 [ 3068.207445][T29568] security_file_alloc+0x30/0x190 [ 3068.212543][T29568] __alloc_file+0x83/0x1a0 [ 3068.217036][T29568] alloc_empty_file+0xcd/0x1c0 [ 3068.221809][T29568] alloc_file+0x3a/0x280 [ 3068.226231][T29568] alloc_file_pseudo+0xfa/0x150 [ 3068.231087][T29568] sock_alloc_file+0x98/0x1b0 [ 3068.235820][T29568] __sys_socketpair+0x2c8/0x810 [ 3068.240676][T29568] __x64_sys_socketpair+0x4e/0x60 [ 3068.245759][T29568] do_syscall_64+0x44/0xa0 [ 3068.250210][T29568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3068.256103][T29568] RIP: 0033:0x7f675c661709 [ 3068.260617][T29568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3068.280229][T29568] RSP: 002b:00007f675a3d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:32:51 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x400000000000000, 0x0, &(0x7f0000000000)) 17:32:51 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:32:51 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x9000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3068.288636][T29568] RAX: ffffffffffffffda RBX: 00007f675c765f60 RCX: 00007f675c661709 [ 3068.296650][T29568] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 3068.304699][T29568] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.312668][T29568] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3068.320660][T29568] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:51 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 20) 17:32:52 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:32:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x500000000000000, 0x0, &(0x7f0000000000)) [ 3068.411432][T29594] FAULT_INJECTION: forcing a failure. [ 3068.411432][T29594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3068.424511][T29594] CPU: 0 PID: 29594 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 3068.433328][T29594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.443415][T29594] Call Trace: [ 3068.446696][T29594] dump_stack_lvl+0xd6/0x122 [ 3068.451293][T29594] dump_stack+0x11/0x1b [ 3068.455449][T29594] should_fail+0x23c/0x250 17:32:52 executing program 4: shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r0) 17:32:52 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xa000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3068.459869][T29594] should_fail_usercopy+0x16/0x20 [ 3068.464896][T29594] _copy_to_user+0x1c/0x90 [ 3068.469313][T29594] simple_read_from_buffer+0xab/0x120 [ 3068.474842][T29594] proc_fail_nth_read+0x10d/0x150 [ 3068.479877][T29594] ? proc_fault_inject_write+0x230/0x230 [ 3068.485740][T29594] vfs_read+0x1e6/0x750 [ 3068.490077][T29594] ? alloc_file_pseudo+0x123/0x150 [ 3068.495241][T29594] ? __fget_light+0x21b/0x260 [ 3068.499921][T29594] ? __cond_resched+0x11/0x40 [ 3068.504596][T29594] ksys_read+0xd9/0x190 [ 3068.508793][T29594] __x64_sys_read+0x3e/0x50 [ 3068.513297][T29594] do_syscall_64+0x44/0xa0 [ 3068.517718][T29594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3068.523610][T29594] RIP: 0033:0x7f675c61448c [ 3068.528020][T29594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3068.547628][T29594] RSP: 002b:00007f675a3d9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 17:32:52 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:32:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x600000000000000, 0x0, &(0x7f0000000000)) 17:32:52 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xb000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3068.556039][T29594] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f675c61448c [ 3068.564008][T29594] RDX: 000000000000000f RSI: 00007f675a3d91e0 RDI: 0000000000000003 [ 3068.571994][T29594] RBP: 00007f675a3d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.579956][T29594] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3068.587924][T29594] R13: 00007fff0a3fd7df R14: 00007f675a3d9300 R15: 0000000000022000 17:32:52 executing program 2: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x81, 0xdb, 0x4, 0x0, 0x0, 0x8, 0x120, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa4, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x200, 0x9, 0x3, 0x4, 0x80, 0x6, 0x3, 0x0, 0xffff0001, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0xa) getpriority(0x1, r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x9, 0x48, 0x4, 0x8, 0x0, 0x0, 0x8400c, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x980, 0x6, 0x10001, 0x8, 0xfff, 0x7, 0x9, 0x0, 0x401}, r1, 0x4, r2, 0x50ad43a278759603) 17:32:52 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x700000000000000, 0x0, &(0x7f0000000000)) 17:32:52 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:52 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:52 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xc000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:52 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:52 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 17:32:52 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xd000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:52 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff1000/0x4000)=nil, 0xd7dd9ffc29c70fb3) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:52 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x2000)=nil, 0x0) shmdt(r0) 17:32:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x800000000000000, 0x0, &(0x7f0000000000)) 17:32:53 executing program 2: r0 = getpgrp(0xffffffffffffffff) getpriority(0x3, r0) getpriority(0x2, r0) fork() fork() 17:32:53 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x3, 0x1, 0x0, &(0x7f0000000040)) 17:32:53 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xe000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:53 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:53 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x0, 0x3, 0x4, 0x0, 0x21a, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x40200, 0xd97, 0x80000001, 0x6, 0x100000000, 0x71f, 0x6, 0x0, 0x75, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x3, 0x3b, 0x0, 0x3, 0x40002, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x200, 0xfffffffffffffffb}, 0x84, 0x4, 0x8, 0x1, 0x8, 0x5, 0x7e8, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r0, 0x9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000400)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x6, 0x1, 0x5c, 0x0, 0x9, 0x40, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x3, 0x1}, 0x100, 0x6, 0x6, 0x3, 0xcb, 0x0, 0x3f, 0x0, 0x3, 0x0, 0x67a}, 0xffffffffffffffff, 0xf, r1, 0x1) r2 = fork() prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x1f, 0xc9, 0x1, 0x2, 0x0, 0xc911, 0x8002c, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x14510, 0x7fff, 0x7f, 0x7, 0x9, 0x8, 0x81, 0x0, 0x48, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x8) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x2, 0x0, 0x5, 0x7, 0x0, 0x81, 0x4020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x6, 0x7f}, 0x12102, 0x5, 0x7, 0x4, 0x85d, 0x6364, 0x0, 0x0, 0x100, 0x0, 0x1f}, r2, 0xc, r3, 0x1) 17:32:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x900000000000000, 0x0, &(0x7f0000000000)) 17:32:53 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xf000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:53 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:53 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x4, 0x1, 0x0, &(0x7f0000000040)) 17:32:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xa00000000000000, 0x0, &(0x7f0000000000)) 17:32:53 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x14, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x95, 0x1, "89241adee3f619cc103a5ddaf0291b84b8f39f01d6fced399387794074a07ba7428def355bdc7bdba8c8ba5d6ea39a25aa890a3089b9f7fa765d5eb0e511c4f2343efac05c529559c341276c0efc039cf0a556dd3b45002d2a7edde1ba41746aa053fbe731ea60cae77ad6563d95646bba4f0757b9d419b098860c4e0d27b5b23e7b46da1b9acf6475091076f77d2ecea9"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "7acb3e8f8fe8f860f8ede5ed4e30ea689cf30bfe94fcc216573ca781fd169b6fe50bf0b5142c298a56c94c135e61b91d234b75d1bc71f2efdcc3b0d9e1967d82809b18a25bf5ef3400dd1a1475f253722f36c7a52037c20eb50f9fd450618065a42065a95f5aa4d4931deb6a4ef40ee4e1aa5e0e4f852fa0ff6409f7a8900a5387f14195a2124b686bbdfc659050d7d598aa060bbecc991fac30bf252b7f1115619cd4659015a1c76e8f542eeee0aac0d8d8132b28ddfd7b10e3b18604ff6c9cd8e342861146f01281898e4d9a850cb977564dd9eb6f70ae9ba2f8992f319c90f2cb7e929bd6434d07d5a93643eb"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "71f76d92c9d27e207cf172eb51b3441bca9dee3513bc628603318d884c98f5d9f63240052ad9c341c42e8b12f9aad6061e0fcf795decfa2e8c058c1c773b89ea02b17b9b5a8280cc2ed85520"}]}, 0x1f0}}, 0x22000005) 17:32:53 executing program 2: r0 = getpgrp(0x0) r1 = getpgrp(r0) getpriority(0x1, r1) r2 = getpgrp(r1) r3 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x80, 0x7f, 0x2, 0x1f, 0x0, 0x80000001, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0x3, 0x1ff}, 0x4000, 0x20, 0x2, 0x6, 0x9, 0xb655, 0x6a, 0x0, 0x1, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8f, 0x40, 0x9e, 0x89, 0x0, 0x1f, 0xc0000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x400, 0x8, 0x80000001, 0x5, 0xf5, 0x1, 0x0, 0x0, 0x43d}, r0, 0x5, r3, 0xa) r4 = fork() wait4(r4, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, r4, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)="6db6ef62cf0ce21fbb926c51559b14e53ef4704c5ece2c85f625bb9686c9b5708e7688f407d6616a205870a9b968b5b964b0e01313225e74c0507cda9009d98786631238c1d9e0c4b659853d09e5a50a142dd3f896328852839372a8347083c20fcef166af6c10309b8b88feee3182b32814a6540a31e6936924b93288feab367aef7af2a85d5741ff88e2f534f58aeafba67b965d445a677b9ef635652fad084adc078af6414cafeff0516112ff", 0xae}) ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000080)={&(0x7f0000000000)="f29728fb36605afcd965dc7c0945994ee7c639a10095be831eaa1ea6d20d15953b9be48bbf204037a3c91bfebf9a24b94ee36aaf60049214d43d3303f7060e92620b469c26fb227a6aa2a7753b62c466956b4fe8672aa3c6c218aa6a4193960684d1215d1f", 0x65}) 17:32:53 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x5, 0x1, 0x0, &(0x7f0000000040)) 17:32:53 executing program 3: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:53 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x10000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xb00000000000000, 0x0, &(0x7f0000000000)) 17:32:53 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff8000/0x2000)=nil, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 17:32:53 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xc00000000000000, 0x0, &(0x7f0000000000)) 17:32:54 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x6, 0x1, 0x0, &(0x7f0000000040)) 17:32:54 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x11000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:54 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x0) 17:32:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xd00000000000000, 0x0, &(0x7f0000000000)) 17:32:54 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x12000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:54 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:32:54 executing program 2: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000000)={0x3}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000540)={'\x00', 0x181, 0x2, 0x7f}) getpriority(0x1, 0x0) 17:32:54 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:54 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmdt(r0) io_uring_enter(0xffffffffffffffff, 0xd27, 0xafb2, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) 17:32:54 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0xf, 0x1, 0x0, &(0x7f0000000040)) 17:32:54 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x13000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:54 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) r0 = getpgrp(0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, 0xffffffffffffffff, 0x10000000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0xffffffffffffffd5) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) getpriority(0x1, r0) 17:32:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xe00000000000000, 0x0, &(0x7f0000000000)) 17:32:54 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:32:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xf00000000000000, 0x0, &(0x7f0000000000)) 17:32:54 executing program 2: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x7fffffff) r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x80, 0x0, 0x80, 0x0, 0x3, 0x200, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0x8601, 0x4d, 0xbd0, 0x2, 0x101, 0x4d, 0x200, 0x0, 0x800, 0x0, 0x8001}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) wait4(r0, &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)) r2 = getpgrp(r0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x8, 0x1, 0x3, 0x0, 0xfffffffffffffff8, 0x1402, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0xc00, 0x5, 0x1, 0x4, 0x315, 0x4, 0xe4ea, 0x0, 0x7, 0x0, 0x4ed}, r2, 0x6, r1, 0x9) 17:32:55 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x1, @empty, 0x7}, {0xa, 0x4e23, 0x7fff, @private1, 0x5}, 0x9, [0xffff, 0x4, 0x4000, 0x0, 0x8001, 0xffff, 0x200]}, 0x5c) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x1f, 0x80, 0x6, 0x0, 0xffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x100, 0x2}, 0x800, 0x7aa7, 0x5, 0x9, 0xa0f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}, 0x6) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x32010000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x10, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1000000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x11, r0, 0x10000000) 17:32:55 executing program 2: r0 = getpgrp(0xffffffffffffffff) fork() fork() getpriority(0x1, r0) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x11, r0, 0x10000000) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1100000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x10000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x11, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000016c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7bc0e6248d4b3096}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x8010) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="78000040000004bf0000000846bc001800660000152f9078ac1414bbe000000100010000"]}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty, 0x15, r4}) io_uring_setup(0x6ebe, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x1, 0x255}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12b8}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x1200000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1b, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x100000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x11, r0, 0x10000000) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x2d00000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={{0x5, 0x31}, {0x1f, 0x4}, 0x80000000, 0x4, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x3, 0x7}, 'port0\x00', 0xd4, 0x90000, 0x2, 0x0, 0x81, 0x4641, 0x8000, 0x0, 0x4, 0x7f}) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000001c0)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) r1 = getpgrp(0xffffffffffffffff) pidfd_open(r1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4000) getpriority(0x1, r1) wait4(r1, &(0x7f0000000000), 0x4, &(0x7f00000002c0)) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x44}}, 0x4000000) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x10, r0, 0x10000000) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x2d, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4000000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x10, r0, 0x10000000) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x200000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4800000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x10, r0, 0x10000000) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x2b9, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 2: r0 = fork() r1 = getpgrp(r0) getpriority(0x1, r1) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x4c00000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:55 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffff8f, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffb}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x6f94866863f3c174) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x300000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x300, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6800000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x5000) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r0 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffa000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) 17:32:55 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:32:55 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x7a3381, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) getpgrp(r2) getpriority(0x1, r0) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x400000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6c00000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x2, 0x0, &(0x7f0000000040)) 17:32:55 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x500000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7400000000000000, 0x0, &(0x7f0000000000)) 17:32:55 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x3, 0x0, &(0x7f0000000040)) 17:32:55 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x600000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:kmsg_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c000}, 0x20) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r2 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ff9000/0x2000)=nil) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) r3 = shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmdt(r3) 17:32:55 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:32:56 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x5, 0xffff, 0x8, {0x400, 0x3}, 0x100}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xea, 0x6}, 'port0\x00', 0xa, 0x80004, 0x7f, 0x20, 0x3d, 0x8, 0x2, 0x0, 0x0, 0x30}) r2 = getpgrp(0xffffffffffffffff) getpriority(0x1, r2) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x7a00000000000000, 0x0, &(0x7f0000000000)) 17:32:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x4, 0x0, &(0x7f0000000040)) 17:32:56 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:32:56 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x700000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:56 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x746, 0x2, {0x2, 0x0, 0x22ab, 0x2, 0x4}, 0x3}) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x8004000000000000, 0x0, &(0x7f0000000000)) 17:32:56 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmget(0x0, 0x1000, 0x14, &(0x7f0000ffa000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) 17:32:56 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, 0x0) 17:32:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x5, 0x0, &(0x7f0000000040)) 17:32:56 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) r2 = fork() wait4(r2, 0x0, 0x2, 0x0) getpgrp(r1) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) getpriority(0x2, 0x0) r4 = fork() wait4(r4, 0x0, 0x2, 0x0) getpgrp(r4) getpriority(0x1, r0) 17:32:56 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x800000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xcc02000000000000, 0x0, &(0x7f0000000000)) 17:32:56 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xfeffffff00000000, 0x0, &(0x7f0000000000)) 17:32:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x6, 0x0, &(0x7f0000000040)) 17:32:56 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x900000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:56 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, 0x0) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xffffffff00000000, 0x0, &(0x7f0000000000)) 17:32:56 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:32:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0xa, 0x0, &(0x7f0000000040)) 17:32:56 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, 0x0) 17:32:57 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xfb, 0xed, 0x5, 0xc6, 0x0, 0x6, 0x80111, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x10000, 0xff, 0x4, 0xff, 0x1, 0x8, 0x0, 0x40, 0x0, 0xcc1}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = getpgrp(0xffffffffffffffff) getpriority(0x0, r1) 17:32:57 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xa00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:57 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) r0 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x54, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x80, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x24002000}, 0x20000010) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 17:32:57 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0xf, 0x0, &(0x7f0000000040)) 17:32:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x101800) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x2010, r2, 0x8001) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x20, 0x0, 0x20, 0x0, "ee446c7f363da73cd0f1640fb386c1ef55d4c446169ed5175cfed9cd023f4a3f364b1998ba3c2038457a9e9418b49816bd3250a8e5f10d61781264ad642033b5", "1bd267527c4bf1f9dd95c78feb68c06d8833fce16e4f117ff49da931e9d20353", [0x1, 0x10000]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) socketpair(0x6, 0x5, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 17:32:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) 17:32:57 executing program 2: r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpgrp(r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = getpgrp(r1) getpriority(0x1, r2) getpriority(0x0, r2) getpriority(0x1, 0x0) 17:32:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x3, &(0x7f0000000000)) 17:32:57 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x10, 0x0, &(0x7f0000000040)) 17:32:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4, &(0x7f0000000000)) 17:32:57 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xb00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:57 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 1) 17:32:57 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x4, 0x1f, 0x9, 0x4, 0x0, 0xecf3, 0x40860, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40, 0x7}, 0x2000, 0x3, 0xc4c6, 0x4, 0x1, 0x2, 0xab8, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0x110, r0, 0xc0) r1 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000040)={0xfffffffe, 0x0, 'client1\x00', 0xffffffff80000004, "31cb19aa68e58af2", "ad97b153189c97a923dab67d4e0930dadb6ca70e233f9536d1c329053f7b73ce", 0x401, 0x1000}) [ 3074.207460][T30069] FAULT_INJECTION: forcing a failure. [ 3074.207460][T30069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3074.220721][T30069] CPU: 0 PID: 30069 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3074.229482][T30069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3074.239613][T30069] Call Trace: [ 3074.242891][T30069] dump_stack_lvl+0xd6/0x122 [ 3074.247486][T30069] dump_stack+0x11/0x1b [ 3074.251709][T30069] should_fail+0x23c/0x250 17:32:57 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="45eef34a", @ANYRES16=r1, @ANYBLOB="20002760138ea57247a3aff10e427e80c1bbddbd7000fcdbdf0900fc010000000000faffffff0000000000050003002b000000090000004e2000000efb58340200000008000600ac14143e050002000a000000060001004e24000014000900fc0200000000ec0000000000000004000500000000000000000000003d69670919346c8ee1100dfca5d6f08026a8bc7d50041ab148ca46006fdb013d6a237e764e10e2a7edc3a52cbb3286b24115"], 0x78}}, 0x4000010) 17:32:57 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x11, 0x0, &(0x7f0000000040)) [ 3074.256157][T30069] __alloc_pages+0x102/0x320 [ 3074.260795][T30069] alloc_pages+0x382/0x3d0 [ 3074.265209][T30069] __pmd_alloc+0x47/0x340 [ 3074.269560][T30069] handle_mm_fault+0x1224/0x1580 [ 3074.274642][T30069] do_user_addr_fault+0x609/0xbe0 [ 3074.279672][T30069] exc_page_fault+0x91/0x220 [ 3074.284260][T30069] asm_exc_page_fault+0x1e/0x30 [ 3074.289116][T30069] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3074.294835][T30069] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3074.314439][T30069] RSP: 0018:ffffc90003a4fe80 EFLAGS: 00050293 [ 3074.320509][T30069] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3074.328478][T30069] RDX: ffff888127608080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3074.336531][T30069] RBP: 000000000000000a R08: ffffffff82480f78 R09: 0001ffff836341df [ 3074.344500][T30069] R10: 0001888119a3de07 R11: 0000000000000000 R12: 0000000000000001 17:32:58 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xc00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3074.352567][T30069] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3074.360538][T30069] ? __sys_socketpair+0xa8/0x810 [ 3074.365482][T30069] __sys_socketpair+0xc4/0x810 [ 3074.370244][T30069] __x64_sys_socketpair+0x4e/0x60 [ 3074.375363][T30069] do_syscall_64+0x44/0xa0 [ 3074.379928][T30069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3074.385880][T30069] RIP: 0033:0x7f45a4158709 17:32:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000000)) [ 3074.390296][T30069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3074.409951][T30069] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3074.418696][T30069] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3074.426666][T30069] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3074.434725][T30069] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.442904][T30069] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 17:32:58 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1b, 0x0, &(0x7f0000000040)) [ 3074.450957][T30069] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:32:58 executing program 2: r0 = getpgrp(0x0) r1 = getpgrp(r0) getpriority(0x1, r1) pidfd_open(r1, 0x0) 17:32:58 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000004, 0x40010, r0, 0x10000000) 17:32:58 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 2) 17:32:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6, &(0x7f0000000000)) 17:32:58 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x2d, 0x0, &(0x7f0000000040)) 17:32:58 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xd00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3075.061862][T30112] FAULT_INJECTION: forcing a failure. [ 3075.061862][T30112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3075.075117][T30112] CPU: 1 PID: 30112 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3075.083948][T30112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3075.094041][T30112] Call Trace: [ 3075.097402][T30112] dump_stack_lvl+0xd6/0x122 [ 3075.102026][T30112] dump_stack+0x11/0x1b [ 3075.106191][T30112] should_fail+0x23c/0x250 [ 3075.110619][T30112] __alloc_pages+0x102/0x320 [ 3075.115217][T30112] alloc_pages+0x382/0x3d0 [ 3075.119631][T30112] pte_alloc_one+0x29/0xb0 [ 3075.124043][T30112] __pte_alloc+0x2f/0x220 [ 3075.128364][T30112] do_anonymous_page+0x7a9/0x8b0 [ 3075.133340][T30112] ? __pmd_alloc+0x301/0x340 [ 3075.137956][T30112] handle_mm_fault+0x7f5/0x1580 [ 3075.142807][T30112] do_user_addr_fault+0x609/0xbe0 [ 3075.147969][T30112] exc_page_fault+0x91/0x220 [ 3075.152583][T30112] asm_exc_page_fault+0x1e/0x30 17:32:58 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)="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", 0xfb}) getpriority(0x1, r0) getpriority(0x2, r0) 17:32:58 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x30303) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000002c0)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf2500050001000100000008000400ac1414bb050001000100000014000200fe8000000000000000000000000000bb140006006970366772657461703000000000000014000300fe80000000000000000000000000003d2800070073797374656d5f753a6f626a6563745f723a7379736c6f67645f657865635f743a7330001400060076657468305f6d616376746170000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0xb8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x24, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x78, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x890) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r2) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000002) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 17:32:58 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x2b9, 0x0, &(0x7f0000000040)) [ 3075.157522][T30112] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3075.163293][T30112] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3075.182908][T30112] RSP: 0018:ffffc90003bbfe80 EFLAGS: 00050293 [ 3075.188973][T30112] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3075.196940][T30112] RDX: ffff8881aaeab080 RSI: 0000000000000005 RDI: 00000000ffffffff 17:32:58 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000040)={{0x7, 0x1}, 'port0\x00', 0x4, 0x1, 0x4, 0x18c, 0x8, 0x2, 0x3, 0x0, 0x4, 0x3}) r0 = syz_io_uring_setup(0x71ac, &(0x7f0000000340)={0x0, 0x360d, 0x20}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x400000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000180)={{0x40, 0xf7}, {0x6, 0x6}, 0x0, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000002c0)={0x5, 0x0, {0xffffffffffffffff, 0x3, 0x1000, 0x0, 0x3973}, 0x8}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000400)=@gcm_128={{0x304}, "e68751cd3751ddb9", "6805545871a86d5ed0d352f9a1cdeb95", "768d93ae", "e9037401edd59b6a"}, 0x28) r4 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x80, 0x0, 0x8, 0x1, 0x0, 0x2, 0x80000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa513, 0x1, @perf_config_ext={0x5, 0xe37}, 0x10, 0x6b, 0x5cb, 0x3, 0x5, 0x20, 0x7fff, 0x0, 0x6, 0x0, 0xfff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) r5 = eventfd2(0xfff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, r4, r5, r6, r7, 0xffffffffffffffff, r1, r1], 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x10000000) [ 3075.204915][T30112] RBP: 000000000000000a R08: ffffffff82480f78 R09: 0001ffff836341df [ 3075.213063][T30112] R10: 0001888119a3d787 R11: 0000000000000000 R12: 0000000000000001 [ 3075.221038][T30112] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3075.229021][T30112] ? __sys_socketpair+0xa8/0x810 [ 3075.233974][T30112] __sys_socketpair+0xc4/0x810 [ 3075.238773][T30112] __x64_sys_socketpair+0x4e/0x60 [ 3075.243858][T30112] do_syscall_64+0x44/0xa0 [ 3075.248323][T30112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3075.254284][T30112] RIP: 0033:0x7f45a4158709 17:32:58 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xe00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3075.258696][T30112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3075.278329][T30112] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3075.286741][T30112] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3075.294707][T30112] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3075.302688][T30112] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 17:32:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7, &(0x7f0000000000)) 17:32:58 executing program 2: getpgrp(0xffffffffffffffff) r0 = fork() wait4(r0, 0x0, 0x2, 0x0) getpriority(0x1, r0) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000100)={&(0x7f0000000000)="3e43d089c830c4ff81b6ba6fd2f736e22ad52f7f2bcd03667d2b4f3778d0286a24fb87f16cb43f2e1b6b1e7457df548432f4ce814e6f56f9e109d1765ef1800073faebb01f6e5af47ed13b77a5056d72d5e65b165dd1f7ec46cc1f0bdab0fc8168453a145738d9d5b79d69c7d901b0e319e4faf91713088bcaa287b181f9cb747839fb69e7b991fc4a5e3621bf0dedb89c29e6c3053b41c03d9b752bcc22affb54f620bc77f18dd6499b031577e4888dd49d0b0e3151b515ccd769c3267b2e8ec5fd198d964d270a23d3e0331a97f7", 0xcf}) [ 3075.310663][T30112] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3075.318634][T30112] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:32:58 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0xf00000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:59 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 3) 17:32:59 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x300, 0x0, &(0x7f0000000040)) 17:32:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x8, &(0x7f0000000000)) 17:32:59 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1000000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:59 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) syz_io_uring_setup(0x2736, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x11, 0x0, "85b3681a3f3165a1a790ed7d0d4f3bb3f49489efe7f5452d9047994d6622e89a47fe018eb25d2403d2c7cf9b54deac90d812275d4ce6be14fd723ff2b4aa91abd4aeb80d76f33ce2107c5ac1c609ca52"}, 0x63) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1dc, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0xcc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8c1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5e86}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r1 = shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) shmdt(r1) 17:32:59 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:32:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x9, &(0x7f0000000000)) 17:32:59 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1100000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:59 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1200000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:59 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1], 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) [ 3075.535967][T30160] FAULT_INJECTION: forcing a failure. [ 3075.535967][T30160] name failslab, interval 1, probability 0, space 0, times 0 [ 3075.548645][T30160] CPU: 0 PID: 30160 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3075.557418][T30160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3075.567471][T30160] Call Trace: [ 3075.570744][T30160] dump_stack_lvl+0xd6/0x122 [ 3075.575344][T30160] dump_stack+0x11/0x1b [ 3075.579535][T30160] should_fail+0x23c/0x250 [ 3075.583944][T30160] ? __anon_vma_prepare+0x41/0x2d0 [ 3075.589111][T30160] __should_failslab+0x81/0x90 [ 3075.593974][T30160] should_failslab+0x5/0x20 [ 3075.598530][T30160] kmem_cache_alloc+0x4f/0x300 [ 3075.603308][T30160] ? pte_alloc_one+0x8c/0xb0 [ 3075.607894][T30160] __anon_vma_prepare+0x41/0x2d0 [ 3075.612824][T30160] do_anonymous_page+0x7ca/0x8b0 [ 3075.617760][T30160] ? __pmd_alloc+0x301/0x340 [ 3075.622347][T30160] handle_mm_fault+0x7f5/0x1580 [ 3075.627211][T30160] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 3075.633192][T30160] do_user_addr_fault+0x609/0xbe0 [ 3075.638215][T30160] exc_page_fault+0x91/0x220 [ 3075.642832][T30160] asm_exc_page_fault+0x1e/0x30 [ 3075.647764][T30160] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3075.653486][T30160] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3075.673122][T30160] RSP: 0018:ffffc90003f0fe80 EFLAGS: 00050293 [ 3075.679227][T30160] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3075.687190][T30160] RDX: ffff888127608080 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3075.695153][T30160] RBP: 000000000000000a R08: ffffffff82480f78 R09: 0001ffff836341df [ 3075.703190][T30160] R10: 00018881ae76b487 R11: 0000000000000000 R12: 0000000000000001 [ 3075.711195][T30160] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3075.719165][T30160] ? __sys_socketpair+0xa8/0x810 [ 3075.724106][T30160] __sys_socketpair+0xc4/0x810 [ 3075.728879][T30160] __x64_sys_socketpair+0x4e/0x60 [ 3075.733902][T30160] do_syscall_64+0x44/0xa0 [ 3075.738320][T30160] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3075.744325][T30160] RIP: 0033:0x7f45a4158709 [ 3075.748736][T30160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3075.768392][T30160] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3075.776784][T30160] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3075.784742][T30160] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3075.792696][T30160] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3075.800645][T30160] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3075.808595][T30160] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:32:59 executing program 2: keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r0 = getpgrp(0xffffffffffffffff) getpriority(0x1, r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xbc000) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) io_uring_setup(0x44e6, &(0x7f0000000100)={0x0, 0x5c9b, 0x4, 0x2, 0xe2}) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = fork() wait4(r3, 0x0, 0x2, 0x0) getpgrp(r3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9, 0x40010, r2, 0x0) 17:32:59 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:32:59 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x1300000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:32:59 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x2, &(0x7f0000000040)) 17:32:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xa, &(0x7f0000000000)) 17:32:59 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 4) [ 3076.362330][T30193] FAULT_INJECTION: forcing a failure. [ 3076.362330][T30193] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.375034][T30193] CPU: 0 PID: 30193 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3076.383796][T30193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3076.393849][T30193] Call Trace: [ 3076.397205][T30193] dump_stack_lvl+0xd6/0x122 [ 3076.401804][T30193] dump_stack+0x11/0x1b [ 3076.406018][T30193] should_fail+0x23c/0x250 17:33:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xb, &(0x7f0000000000)) 17:33:00 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x0, 0x1, 'client1\x00', 0x4, "1ba69ef7de24fe47", "7a1abaea72095a70c939a98a95dd9ef59313b5f6fa05396bb5e7760c755d8663", 0x6, 0x9}) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)={'\x00', 0x8, 0x0, 0x26}) 17:33:00 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0, 0x3201000000000000}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3076.410432][T30193] ? __anon_vma_prepare+0x92/0x2d0 [ 3076.415536][T30193] __should_failslab+0x81/0x90 [ 3076.420299][T30193] should_failslab+0x5/0x20 [ 3076.424799][T30193] kmem_cache_alloc+0x4f/0x300 [ 3076.429615][T30193] ? __anon_vma_prepare+0x41/0x2d0 [ 3076.434724][T30193] __anon_vma_prepare+0x92/0x2d0 [ 3076.439677][T30193] do_anonymous_page+0x7ca/0x8b0 [ 3076.444619][T30193] ? __pmd_alloc+0x301/0x340 [ 3076.449496][T30193] handle_mm_fault+0x7f5/0x1580 [ 3076.454348][T30193] do_user_addr_fault+0x609/0xbe0 [ 3076.459403][T30193] exc_page_fault+0x91/0x220 [ 3076.463998][T30193] asm_exc_page_fault+0x1e/0x30 [ 3076.468853][T30193] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3076.474576][T30193] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3076.494209][T30193] RSP: 0018:ffffc90003f8fe80 EFLAGS: 00050293 [ 3076.500286][T30193] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 17:33:00 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x2}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3076.508254][T30193] RDX: ffff8881a7fb2000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3076.516225][T30193] RBP: 000000000000000a R08: ffffffff82480f78 R09: 0001ffff836341df [ 3076.524196][T30193] R10: 00018881ae76ba87 R11: 0000000000000000 R12: 0000000000000001 [ 3076.532161][T30193] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3076.540132][T30193] ? __sys_socketpair+0xa8/0x810 [ 3076.545078][T30193] __sys_socketpair+0xc4/0x810 [ 3076.549872][T30193] __x64_sys_socketpair+0x4e/0x60 [ 3076.554896][T30193] do_syscall_64+0x44/0xa0 17:33:00 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x3, &(0x7f0000000040)) [ 3076.559334][T30193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3076.565233][T30193] RIP: 0033:0x7f45a4158709 [ 3076.569638][T30193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3076.589239][T30193] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3076.597646][T30193] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3076.605619][T30193] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a 17:33:00 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x4, &(0x7f0000000040)) [ 3076.613586][T30193] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3076.621552][T30193] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3076.629585][T30193] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xdd, 0x2, 0x44, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x0, 0x7fff, 0x10001}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x700, 0x7, 0x525a, 0x7, {{0x1c, 0x4, 0x2, 0x16, 0x70, 0x65, 0x0, 0x7f, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x7, 0xe, "f51eaea4c0333474e64eb254"}]}, @noop, @ssrr={0x89, 0xb, 0x8c, [@multicast2, @empty]}, @timestamp_addr={0x44, 0x3c, 0xb2, 0x1, 0x9, [{@loopback, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x9}, {@private=0xa010100, 0x800}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x43}, {@broadcast, 0x1f}, {@remote, 0x3}, {@empty, 0x6}]}]}}}}}) r2 = getpgrp(0xffffffffffffffff) getpriority(0x1, r2) 17:33:00 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x401) 17:33:00 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x3}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:00 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 5) 17:33:00 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xc, &(0x7f0000000000)) 17:33:00 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x5, &(0x7f0000000040)) [ 3077.239857][T30225] FAULT_INJECTION: forcing a failure. [ 3077.239857][T30225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3077.253245][T30225] CPU: 0 PID: 30225 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3077.262124][T30225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3077.272184][T30225] Call Trace: [ 3077.275457][T30225] dump_stack_lvl+0xd6/0x122 [ 3077.280147][T30225] dump_stack+0x11/0x1b [ 3077.284302][T30225] should_fail+0x23c/0x250 17:33:00 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x4}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3077.288793][T30225] __alloc_pages+0x102/0x320 [ 3077.293386][T30225] alloc_pages_vma+0x5ee/0x770 [ 3077.298148][T30225] do_anonymous_page+0x16e/0x8b0 [ 3077.303090][T30225] ? __pmd_alloc+0x301/0x340 [ 3077.307673][T30225] handle_mm_fault+0x7f5/0x1580 [ 3077.312919][T30225] do_user_addr_fault+0x609/0xbe0 [ 3077.317967][T30225] exc_page_fault+0x91/0x220 [ 3077.322638][T30225] asm_exc_page_fault+0x1e/0x30 [ 3077.327565][T30225] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 3077.333334][T30225] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 3077.353032][T30225] RSP: 0018:ffffc90004667e80 EFLAGS: 00050293 [ 3077.359152][T30225] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040 [ 3077.367122][T30225] RDX: ffff88816efa4000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 3077.375098][T30225] RBP: 000000000000000a R08: ffffffff82480f78 R09: 0001ffff836341df 17:33:01 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x6, &(0x7f0000000040)) [ 3077.383070][T30225] R10: 000188812f87d507 R11: 0000000000000000 R12: 0000000000000001 [ 3077.391037][T30225] R13: 0000000020000040 R14: 0000000000000000 R15: 0000000000000005 [ 3077.399063][T30225] ? __sys_socketpair+0xa8/0x810 [ 3077.404009][T30225] __sys_socketpair+0xc4/0x810 [ 3077.408861][T30225] __x64_sys_socketpair+0x4e/0x60 [ 3077.413885][T30225] do_syscall_64+0x44/0xa0 [ 3077.418314][T30225] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3077.424212][T30225] RIP: 0033:0x7f45a4158709 17:33:01 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=0x1, 0x4) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) [ 3077.428623][T30225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3077.448550][T30225] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3077.456960][T30225] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3077.464931][T30225] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3077.472904][T30225] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.480874][T30225] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3077.488867][T30225] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:01 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x7, &(0x7f0000000040)) 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xd, &(0x7f0000000000)) 17:33:01 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000fbdbdf251e0000000c00060002000000000000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0800030087b644bc47b77ed71d53a1fb9b2aabca0ea76ddc737f2773738301d528e2d3717aa4037a61ff108e7e74dbb27af313966a24524210a734f1873d245d857b3a90b56727384448dd7c4c8ec574d29e6fd4e16d91caa74e2cda7f1fb7e1f3d37dc37b11e962dd9636d5ecd17ca4274bd192ba23f74b510b5406f6a5dff18cb50ed035714325c0cc60d9963e777fdc6e08efed50679f30ba76b26c03d6fd0e9600bd58ea6a54165a04a8d493bb54a1fa6d10a7c709000036da950541436600"/205, @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c0006000100000001000000"], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x40041) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100), 0x1) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x3000) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) 17:33:01 executing program 2: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) getpriority(0x1, 0x0) 17:33:01 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x5}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:01 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x10, &(0x7f0000000040)) 17:33:01 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 6) 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xe, &(0x7f0000000000)) 17:33:01 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000050) 17:33:01 executing program 2: r0 = getpgrp(0xffffffffffffffff) r1 = fork() wait4(r1, 0x0, 0x2, 0x0) r2 = fork() r3 = getpgrp(r2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x7, 0xa9, 0x8, 0x0, 0x9, 0x504, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80}, 0x6080, 0x200, 0x9, 0x3, 0x9, 0x202, 0x81, 0x0, 0x8, 0x0, 0xffffffff}, r0, 0x1, 0xffffffffffffffff, 0x3) getpriority(0x1, r3) getpriority(0x0, r0) 17:33:01 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x2cc, &(0x7f0000000040)) 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xf, &(0x7f0000000000)) [ 3077.705995][T30284] FAULT_INJECTION: forcing a failure. [ 3077.705995][T30284] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.718657][T30284] CPU: 0 PID: 30284 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3077.727579][T30284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3077.737632][T30284] Call Trace: [ 3077.740913][T30284] dump_stack_lvl+0xd6/0x122 [ 3077.745520][T30284] dump_stack+0x11/0x1b [ 3077.749680][T30284] should_fail+0x23c/0x250 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x10, &(0x7f0000000000)) 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x11, &(0x7f0000000000)) [ 3077.754173][T30284] ? sock_alloc_inode+0x23/0x90 [ 3077.759063][T30284] __should_failslab+0x81/0x90 [ 3077.763873][T30284] ? sockfs_init_fs_context+0x70/0x70 [ 3077.769257][T30284] should_failslab+0x5/0x20 [ 3077.773827][T30284] kmem_cache_alloc+0x4f/0x300 [ 3077.778628][T30284] ? sockfs_init_fs_context+0x70/0x70 [ 3077.784034][T30284] sock_alloc_inode+0x23/0x90 [ 3077.788730][T30284] ? sockfs_init_fs_context+0x70/0x70 [ 3077.794109][T30284] new_inode_pseudo+0x38/0x1c0 [ 3077.798940][T30284] __sock_create+0x122/0x4e0 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x12, &(0x7f0000000000)) [ 3077.803530][T30284] __sys_socketpair+0x192/0x810 [ 3077.808457][T30284] __x64_sys_socketpair+0x4e/0x60 [ 3077.813550][T30284] do_syscall_64+0x44/0xa0 [ 3077.817972][T30284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3077.823881][T30284] RIP: 0033:0x7f45a4158709 [ 3077.828486][T30284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3077.848107][T30284] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:33:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2d, &(0x7f0000000000)) 17:33:01 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x6}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:01 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shmdt(r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) [ 3077.856549][T30284] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3077.864573][T30284] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3077.872544][T30284] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3077.880508][T30284] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3077.888481][T30284] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 [ 3077.896555][T30284] socket: no more sockets 17:33:01 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 7) 17:33:01 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x300, &(0x7f0000000040)) 17:33:01 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) socket(0x1f, 0x80000, 0xffffffff) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) [ 3077.987343][T30321] FAULT_INJECTION: forcing a failure. [ 3077.987343][T30321] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.999993][T30321] CPU: 0 PID: 30321 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3078.008844][T30321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3078.018900][T30321] Call Trace: [ 3078.022171][T30321] dump_stack_lvl+0xd6/0x122 [ 3078.026822][T30321] dump_stack+0x11/0x1b [ 3078.030960][T30321] should_fail+0x23c/0x250 [ 3078.035362][T30321] ? security_inode_alloc+0x30/0x180 [ 3078.040631][T30321] __should_failslab+0x81/0x90 [ 3078.045417][T30321] should_failslab+0x5/0x20 [ 3078.049900][T30321] kmem_cache_alloc+0x4f/0x300 [ 3078.054642][T30321] security_inode_alloc+0x30/0x180 [ 3078.059732][T30321] inode_init_always+0x20b/0x430 [ 3078.064685][T30321] ? sockfs_init_fs_context+0x70/0x70 [ 3078.070041][T30321] new_inode_pseudo+0x73/0x1c0 [ 3078.074786][T30321] __sock_create+0x122/0x4e0 [ 3078.079375][T30321] __sys_socketpair+0x192/0x810 [ 3078.084276][T30321] __x64_sys_socketpair+0x4e/0x60 [ 3078.089280][T30321] do_syscall_64+0x44/0xa0 [ 3078.093678][T30321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3078.099553][T30321] RIP: 0033:0x7f45a4158709 [ 3078.103946][T30321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.123539][T30321] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3078.131931][T30321] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3078.139963][T30321] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3078.147913][T30321] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.155864][T30321] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3078.163819][T30321] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 [ 3078.171821][T30321] socket: no more sockets 17:33:02 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xc, &(0x7f0000000000)) 17:33:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x48, &(0x7f0000000000)) 17:33:02 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x7}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:02 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x480, &(0x7f0000000040)) 17:33:02 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000180)={0xfff, 0x0, 'client0\x00', 0x1, "92b0fcdd39e454a1", "23429f379ef0e042f735199774001283c42379e964c22f95d2135549c21bd019", 0x17c1, 0x1ff}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x401, 0x101, 0x0, 0x3, 0x3, 0x1a, "74d65f3d325f5579608a579040888433c333096fb6cef5906b92c9b1ec064aa5043a36d1c9eed16664ec9e7dbeab576897d21f30683da71fdb5c44f1bccb5501", "3693719a12b299f176816498e53cf3564dfd23095b18b86dc61a19370e603cf6018f524f3297aacae74eedbd50fef6e08f1cee813c216a0f4a19632e28d7eacd", "283d307b42d8947513044f4139745f6463fd47081f027efd17e8e579a87ed5b8", [0x7, 0x8]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x14c01, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000280)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x6, {{0xa, 0x4e20, 0x5, @local, 0xfffffe00}}, 0x0, 0x2, [{{0xa, 0x4e23, 0xf0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x52de08a8}}, {{0xa, 0x4e22, 0x9, @mcast2, 0x8}}]}, 0x190) 17:33:02 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 8) 17:33:02 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x8}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:02 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x100, 0x1, 'client1\x00', 0x0, "62e26830c67c7eca", "2a2ae12da657f96bab1034081e21c5de71c67ef788bb699e2cef1e8be035f341", 0x7, 0x7}) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) (fail_nth: 1) [ 3078.676895][T30348] FAULT_INJECTION: forcing a failure. [ 3078.676895][T30348] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.689650][T30348] CPU: 0 PID: 30348 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3078.698582][T30348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3078.708650][T30348] Call Trace: [ 3078.711928][T30348] dump_stack_lvl+0xd6/0x122 [ 3078.716519][T30348] dump_stack+0x11/0x1b [ 3078.720682][T30348] should_fail+0x23c/0x250 [ 3078.725094][T30348] ? sk_prot_alloc+0x41/0x190 [ 3078.729761][T30348] __should_failslab+0x81/0x90 [ 3078.734523][T30348] should_failslab+0x5/0x20 [ 3078.739026][T30348] kmem_cache_alloc+0x4f/0x300 [ 3078.743869][T30348] sk_prot_alloc+0x41/0x190 [ 3078.748363][T30348] sk_alloc+0x2e/0x220 [ 3078.750049][T30357] FAULT_INJECTION: forcing a failure. [ 3078.750049][T30357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3078.752477][T30348] inet6_create+0x2b2/0x730 [ 3078.752497][T30348] __sock_create+0x2c7/0x4e0 [ 3078.774562][T30348] __sys_socketpair+0x192/0x810 [ 3078.779443][T30348] __x64_sys_socketpair+0x4e/0x60 [ 3078.784495][T30348] do_syscall_64+0x44/0xa0 [ 3078.788907][T30348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3078.794790][T30348] RIP: 0033:0x7f45a4158709 [ 3078.799187][T30348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.818803][T30348] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3078.827211][T30348] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3078.835171][T30348] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3078.843136][T30348] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.851395][T30348] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3078.859353][T30348] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 [ 3078.867317][T30357] CPU: 1 PID: 30357 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 3078.876153][T30357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3078.886200][T30357] Call Trace: [ 3078.889500][T30357] dump_stack_lvl+0xd6/0x122 [ 3078.894092][T30357] dump_stack+0x11/0x1b [ 3078.898246][T30357] should_fail+0x23c/0x250 [ 3078.902727][T30357] should_fail_usercopy+0x16/0x20 [ 3078.907752][T30357] _copy_to_user+0x1c/0x90 [ 3078.912235][T30357] simple_read_from_buffer+0xab/0x120 [ 3078.917606][T30357] proc_fail_nth_read+0x10d/0x150 [ 3078.922634][T30357] ? proc_fault_inject_write+0x230/0x230 [ 3078.928432][T30357] vfs_read+0x1e6/0x750 [ 3078.932611][T30357] ? __fget_light+0x21b/0x260 [ 3078.937281][T30357] ? __cond_resched+0x11/0x40 [ 3078.941971][T30357] ksys_read+0xd9/0x190 [ 3078.946126][T30357] __x64_sys_read+0x3e/0x50 [ 3078.950668][T30357] do_syscall_64+0x44/0xa0 [ 3078.955114][T30357] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3078.961010][T30357] RIP: 0033:0x7f79d58ee48c [ 3078.965419][T30357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3078.985082][T30357] RSP: 002b:00007f79d36b3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3078.993497][T30357] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f79d58ee48c [ 3079.001557][T30357] RDX: 000000000000000f RSI: 00007f79d36b31e0 RDI: 0000000000000004 [ 3079.009522][T30357] RBP: 00007f79d36b31d0 R08: 0000000000000000 R09: 0000000010000000 [ 3079.017574][T30357] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 17:33:02 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 9) 17:33:02 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x500, &(0x7f0000000040)) 17:33:02 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x9}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:02 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) socketpair(0x11, 0x4, 0x81, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff8000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x240400, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x1, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000380)={0x3f, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000140)={{0x3, 0x1}, {0xfc}, 0x7, 0x1, 0x8}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) [ 3079.025545][T30357] R13: 00007fffb824d8df R14: 00007f79d36b3300 R15: 0000000000022000 17:33:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4c, &(0x7f0000000000)) 17:33:02 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xa}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) [ 3079.062751][T30367] FAULT_INJECTION: forcing a failure. [ 3079.062751][T30367] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.075417][T30367] CPU: 0 PID: 30367 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3079.084182][T30367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.094259][T30367] Call Trace: [ 3079.097532][T30367] dump_stack_lvl+0xd6/0x122 [ 3079.102126][T30367] dump_stack+0x11/0x1b [ 3079.106280][T30367] should_fail+0x23c/0x250 17:33:02 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x600, &(0x7f0000000040)) [ 3079.110692][T30367] __should_failslab+0x81/0x90 [ 3079.115455][T30367] ? selinux_sk_alloc_security+0x61/0x120 [ 3079.121173][T30367] should_failslab+0x5/0x20 [ 3079.125764][T30367] kmem_cache_alloc_trace+0x52/0x320 [ 3079.131055][T30367] ? should_fail+0xd6/0x250 [ 3079.135555][T30367] selinux_sk_alloc_security+0x61/0x120 [ 3079.141155][T30367] security_sk_alloc+0x45/0x90 [ 3079.146016][T30367] sk_prot_alloc+0xd2/0x190 [ 3079.150591][T30367] sk_alloc+0x2e/0x220 [ 3079.154679][T30367] inet6_create+0x2b2/0x730 17:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x16000, 0x100000a, 0x11, r0, 0x10000000) [ 3079.159185][T30367] __sock_create+0x2c7/0x4e0 [ 3079.163766][T30367] __sys_socketpair+0x192/0x810 [ 3079.168620][T30367] __x64_sys_socketpair+0x4e/0x60 [ 3079.173646][T30367] do_syscall_64+0x44/0xa0 [ 3079.178063][T30367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3079.183964][T30367] RIP: 0033:0x7f45a4158709 [ 3079.188371][T30367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.208044][T30367] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3079.216530][T30367] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3079.224547][T30367] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3079.232515][T30367] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.240594][T30367] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 3079.248572][T30367] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x68, &(0x7f0000000000)) 17:33:02 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xb}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:02 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x700, &(0x7f0000000040)) 17:33:02 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 10) 17:33:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x7ffffffff000, 0x100000a, 0x11, r0, 0x10000000) 17:33:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6c, &(0x7f0000000000)) 17:33:03 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x2000, &(0x7f0000000040)) 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xc}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3079.395872][T30412] FAULT_INJECTION: forcing a failure. [ 3079.395872][T30412] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.408536][T30412] CPU: 0 PID: 30412 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3079.417291][T30412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.427350][T30412] Call Trace: [ 3079.430626][T30412] dump_stack_lvl+0xd6/0x122 [ 3079.435222][T30412] dump_stack+0x11/0x1b [ 3079.439376][T30412] should_fail+0x23c/0x250 [ 3079.443790][T30412] __should_failslab+0x81/0x90 [ 3079.448558][T30412] ? selinux_netlbl_socket_post_create+0xda/0x170 [ 3079.454982][T30412] should_failslab+0x5/0x20 [ 3079.459488][T30412] kmem_cache_alloc_trace+0x52/0x320 [ 3079.464780][T30412] selinux_netlbl_socket_post_create+0xda/0x170 [ 3079.471091][T30412] selinux_socket_post_create+0x1de/0x270 [ 3079.476819][T30412] security_socket_post_create+0x5d/0xb0 [ 3079.482472][T30412] __sock_create+0x329/0x4e0 [ 3079.487104][T30412] __sys_socketpair+0x192/0x810 17:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0xffffffffffffffff, 0x100000a, 0x11, r0, 0x10000000) [ 3079.491955][T30412] __x64_sys_socketpair+0x4e/0x60 [ 3079.496976][T30412] do_syscall_64+0x44/0xa0 [ 3079.501462][T30412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3079.507479][T30412] RIP: 0033:0x7f45a4158709 [ 3079.511891][T30412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.531606][T30412] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x11, r0, 0x10000000) [ 3079.540028][T30412] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3079.548037][T30412] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3079.556014][T30412] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.563996][T30412] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3079.571962][T30412] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:03 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xd}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x74, &(0x7f0000000000)) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x4000, &(0x7f0000000040)) 17:33:03 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 11) 17:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001a40)={0x2, 0x2, 'client0\x00', 0x6, "d5654d242df89ff4", "50d37d0b79fc61d78fa49f0ef4ddc2c98efe417cb52b48e0b5d9bd284c1e5fe7", 0x9, 0x7ff}) r1 = io_uring_setup(0x34d0, &(0x7f0000000040)={0x0, 0x3d6c, 0x0, 0x0, 0x360, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x39, 0x200, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00', 0x7800, 0x7, 0x3, 0x1000}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f00000006c0)={0x12f8, 0x12, 0x400, 0x70bd2c, 0x25dfdbff, {0x21, 0x1f, 0x7d, 0x4, {0x4e23, 0x4e22, [0x18, 0x1000, 0x4, 0x4], [0x6, 0x7f, 0x0, 0x80000000], r2, [0x6, 0xfffffffb]}, 0x60000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "dbe3b374afc69b39466c2139ab231cb6c3c501543539f6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "f6d41754ee5bdaa7fd6ef85c504a6a59f91342efc1c0c2bde6de53ccf6443b5a776ef65539028ab282ed24c57a06fd5fb7eb32d778056c6670076010da25e0bd09e10c34059885c348a76254a7ac75cd7fe22520477b85995b625da9772f1641618e1c8d0ae6397a75ec602123153fb0009bd912c7f5647bd926947602e8e3fabc8edf220d1a81612cbb1229f3d7df0d068419bca009f87dcdaff73f59e9757ac76b72c719c04fe915354aad743a"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "2d3ca0f3b096562c9956633d1b06b91a2d406bd39cef72960c00d89fbfb8cf61471683e1dbc2eb8f57c68f13a24bda89113ac7e30c9eb4000003bf652c824aa026526c3f35c877c3730e0dff67dd10926c450a08165e0e2678d303b2cc390c75a0ed6715a7d1aa2e474398d031e6543920ec81301f0820fe15c3f0e9b3dda1caa23120150dab935a40506e853ee18ee03375cedf30151b9e87a9887ac6d1c3ed208600caaf2393d1569e35f72f37d52370091a6e0d58c2d8b663fcfaeedc8789f4b3daade4539f679917"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "075c34f88fa6578ca6402903120ebe164d2d942c08a014f4"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "8062443a373ca4433c73527f835a97566b592f242643da2df2618fdf00d14a076429f28d52c594449ee96be1e07563e98de40005e3bb877a27c015225063e82ac5e9f334ea6c5fb103c45e214f2da5f8dc44dc1e245fcb064a67de08ec110206f9ec6e5e6a82c3362fdb0373a4b9e1f53a7e122d09fda88605fbc9627ce9f0e15dcf5bc0ac0d95f9ebbe0a5f77"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "f1ce97bf221eae7146e4e6d41535147f251180b24daa19cf9a1c93aa59a896b5430ee08e26e933f276056322c43fbb4970d06a"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "5ef7b5151629ef664d55c984c7b92def6687ad70caac4f"}]}, 0x12f8}, 0x1, 0x0, 0x0, 0xc080}, 0x80) 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7a, &(0x7f0000000000)) [ 3079.692606][T30452] FAULT_INJECTION: forcing a failure. [ 3079.692606][T30452] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.705416][T30452] CPU: 0 PID: 30452 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3079.714444][T30452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3079.724497][T30452] Call Trace: [ 3079.727770][T30452] dump_stack_lvl+0xd6/0x122 [ 3079.732362][T30452] dump_stack+0x11/0x1b [ 3079.736556][T30452] should_fail+0x23c/0x250 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x8004, &(0x7f0000000040)) 17:33:03 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x501002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x7, 0x3, 0x800, {0x10000, 0x9}, 0x0, 0x5}) [ 3079.740962][T30452] ? security_netlbl_sid_to_secattr+0xb0/0x150 [ 3079.747210][T30452] __should_failslab+0x81/0x90 [ 3079.751975][T30452] should_failslab+0x5/0x20 [ 3079.756533][T30452] __kmalloc_track_caller+0x6d/0x350 [ 3079.761855][T30452] ? should_fail+0xd6/0x250 [ 3079.766357][T30452] kstrdup+0x31/0x70 [ 3079.770255][T30452] security_netlbl_sid_to_secattr+0xb0/0x150 [ 3079.776300][T30452] selinux_netlbl_socket_post_create+0xfe/0x170 [ 3079.782593][T30452] selinux_socket_post_create+0x1de/0x270 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xe}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3079.788399][T30452] security_socket_post_create+0x5d/0xb0 [ 3079.794171][T30452] __sock_create+0x329/0x4e0 [ 3079.798757][T30452] __sys_socketpair+0x192/0x810 [ 3079.803678][T30452] __x64_sys_socketpair+0x4e/0x60 [ 3079.808786][T30452] do_syscall_64+0x44/0xa0 [ 3079.813233][T30452] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3079.819126][T30452] RIP: 0033:0x7f45a4158709 [ 3079.823542][T30452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:33:03 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700000180000000000001ff481c00200066000006c5476db1b50f5dc8b8941c299078ac1414aaac1414aa00830b71e0000001acaf524d149fa6fa1414bb651d7b893fc8caf74ab8f62cb52817fa27d37c0ee40d60badbab8c510ab8955bda135c5cc21e927a62914f1721151248b721cdd786b3bb0ac614c29377e8a14f038f956424769fa8f4839ec70b5ddc890086117d0b57c07bfc20623877e0b1658a2f2974855a0f9f2b74400055423e966b6508074d1a8b17ac4f9641acb877b73ff8ed03e370cab5835bfe4d66210e3f009f2cd93e298584cc522a7578adfbee972d4d2e284dc534849751c6c1"]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000000c0)=r0, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0xcc02, &(0x7f0000000040)) [ 3079.843146][T30452] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3079.851634][T30452] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3079.859603][T30452] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3079.867573][T30452] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.875972][T30452] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3079.883934][T30452] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:03 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) shmget(0x2, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil) 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2cc, &(0x7f0000000000)) 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xf}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x200000, &(0x7f0000000040)) 17:33:03 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 12) 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x10}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:03 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x3000)=nil, 0x0) r0 = fork() wait4(r0, 0x0, 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x2b}}}, 0x0, 0x0, 0x3a, 0x0, "5171d40c386e59298fc1a8c5f8d3031c32027fac36a67a92144fb91bb8fbcf661070894aa1f6654dc5c5ed857a1591745ad29c49898a6cbf7040134c788aaed3454004a90238020af16ed9e5b5baa604"}, 0xd8) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) waitid$P_PIDFD(0x3, r1, 0x0, 0x0, &(0x7f00000001c0)) r2 = pidfd_open(r0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x301a03, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x80000000, 0xa1, 0x6, {0x0, 0xf6}, 0x8000, 0x2e}) getpgrp(r0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x3000)=nil, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000100), 0x4, 0x0) 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x300, &(0x7f0000000000)) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x1000000, &(0x7f0000000040)) 17:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x12, r0, 0x10000000) 17:33:03 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x11}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x2000000, &(0x7f0000000040)) [ 3080.116525][T30508] FAULT_INJECTION: forcing a failure. [ 3080.116525][T30508] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.129241][T30508] CPU: 1 PID: 30508 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3080.138067][T30508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3080.148205][T30508] Call Trace: [ 3080.151482][T30508] dump_stack_lvl+0xd6/0x122 [ 3080.156107][T30508] dump_stack+0x11/0x1b [ 3080.160264][T30508] should_fail+0x23c/0x250 [ 3080.164686][T30508] ? sock_alloc_inode+0x23/0x90 [ 3080.169542][T30508] __should_failslab+0x81/0x90 [ 3080.174306][T30508] ? sockfs_init_fs_context+0x70/0x70 [ 3080.179682][T30508] should_failslab+0x5/0x20 [ 3080.184189][T30508] kmem_cache_alloc+0x4f/0x300 [ 3080.189014][T30508] ? sockfs_init_fs_context+0x70/0x70 [ 3080.194452][T30508] sock_alloc_inode+0x23/0x90 [ 3080.199140][T30508] ? sockfs_init_fs_context+0x70/0x70 [ 3080.204511][T30508] new_inode_pseudo+0x38/0x1c0 [ 3080.209280][T30508] __sock_create+0x122/0x4e0 [ 3080.213876][T30508] __sys_socketpair+0x1dc/0x810 [ 3080.218730][T30508] __x64_sys_socketpair+0x4e/0x60 [ 3080.223784][T30508] do_syscall_64+0x44/0xa0 [ 3080.228284][T30508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3080.234205][T30508] RIP: 0033:0x7f45a4158709 [ 3080.238614][T30508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.258312][T30508] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x480, &(0x7f0000000000)) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x3000000, &(0x7f0000000040)) 17:33:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x500, &(0x7f0000000000)) 17:33:03 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x4, 0x8, 0x1, 'queue1\x00', 0x7}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x4000000, &(0x7f0000000040)) [ 3080.266790][T30508] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3080.274757][T30508] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3080.282724][T30508] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.290692][T30508] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3080.298661][T30508] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 [ 3080.306817][T30508] socket: no more sockets 17:33:03 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 13) [ 3080.398321][T30549] FAULT_INJECTION: forcing a failure. [ 3080.398321][T30549] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.411063][T30549] CPU: 0 PID: 30549 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3080.419875][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3080.429912][T30549] Call Trace: [ 3080.433187][T30549] dump_stack_lvl+0xd6/0x122 [ 3080.437805][T30549] dump_stack+0x11/0x1b [ 3080.441942][T30549] should_fail+0x23c/0x250 [ 3080.446342][T30549] ? security_inode_alloc+0x30/0x180 [ 3080.451682][T30549] __should_failslab+0x81/0x90 [ 3080.456426][T30549] should_failslab+0x5/0x20 [ 3080.460911][T30549] kmem_cache_alloc+0x4f/0x300 [ 3080.465796][T30549] security_inode_alloc+0x30/0x180 [ 3080.470953][T30549] inode_init_always+0x20b/0x430 [ 3080.475882][T30549] ? sockfs_init_fs_context+0x70/0x70 [ 3080.481284][T30549] new_inode_pseudo+0x73/0x1c0 [ 3080.486056][T30549] __sock_create+0x122/0x4e0 [ 3080.490715][T30549] __sys_socketpair+0x1dc/0x810 [ 3080.495708][T30549] __x64_sys_socketpair+0x4e/0x60 [ 3080.500734][T30549] do_syscall_64+0x44/0xa0 [ 3080.505244][T30549] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3080.511132][T30549] RIP: 0033:0x7f45a4158709 [ 3080.515579][T30549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.535437][T30549] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3080.543829][T30549] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3080.551790][T30549] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3080.559739][T30549] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.567729][T30549] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3080.575679][T30549] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 [ 3080.583687][T30549] socket: no more sockets 17:33:04 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x1000) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_io_uring_setup(0x3595, &(0x7f0000000000)={0x0, 0xdc44, 0x8, 0x2, 0x128, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) 17:33:04 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x0, 0x5, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:04 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x5000000, &(0x7f0000000040)) 17:33:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x600, &(0x7f0000000000)) 17:33:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x12}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:04 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 14) 17:33:04 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x6000000, &(0x7f0000000040)) 17:33:04 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) socketpair(0x29, 0x1, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = eventfd2(0x0, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x6953, 0x0, &(0x7f00000000c0)=[r1, r2, r3, r0, r0, r4, r5]}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2000008, 0x10, r0, 0x10000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000140)) [ 3081.043594][T30570] FAULT_INJECTION: forcing a failure. [ 3081.043594][T30570] name failslab, interval 1, probability 0, space 0, times 0 [ 3081.056250][T30570] CPU: 1 PID: 30570 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3081.065018][T30570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3081.075075][T30570] Call Trace: [ 3081.078352][T30570] dump_stack_lvl+0xd6/0x122 [ 3081.083050][T30570] dump_stack+0x11/0x1b [ 3081.087199][T30570] should_fail+0x23c/0x250 17:33:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x13}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:04 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) [ 3081.091655][T30570] ? sk_prot_alloc+0x41/0x190 [ 3081.096333][T30570] __should_failslab+0x81/0x90 [ 3081.101103][T30570] should_failslab+0x5/0x20 [ 3081.105609][T30570] kmem_cache_alloc+0x4f/0x300 [ 3081.110373][T30570] sk_prot_alloc+0x41/0x190 [ 3081.114968][T30570] sk_alloc+0x2e/0x220 [ 3081.119041][T30570] inet6_create+0x2b2/0x730 [ 3081.123540][T30570] __sock_create+0x2c7/0x4e0 [ 3081.128130][T30570] __sys_socketpair+0x1dc/0x810 [ 3081.132980][T30570] __x64_sys_socketpair+0x4e/0x60 [ 3081.138001][T30570] do_syscall_64+0x44/0xa0 17:33:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x700, &(0x7f0000000000)) [ 3081.142466][T30570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3081.148409][T30570] RIP: 0033:0x7f45a4158709 [ 3081.152819][T30570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3081.172422][T30570] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3081.180877][T30570] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 17:33:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x900, &(0x7f0000000000)) [ 3081.188962][T30570] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3081.196938][T30570] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3081.204904][T30570] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3081.212875][T30570] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:04 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x10000000) 17:33:04 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x7000000, &(0x7f0000000040)) 17:33:04 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x132}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:04 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:04 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xa00, &(0x7f0000000000)) 17:33:05 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 15) 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x10000000, &(0x7f0000000040)) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x300}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:05 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0xf0, 0xc0, 0x3f, 0x0, 0x7, 0x100, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8, 0xa1b}, 0x4c68c, 0x0, 0x9c8d, 0x0, 0x80000000, 0x4, 0x1, 0x0, 0x2, 0x0, 0x101}, 0x0, 0x5, r0, 0x2) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) [ 3081.449531][T30636] FAULT_INJECTION: forcing a failure. [ 3081.449531][T30636] name failslab, interval 1, probability 0, space 0, times 0 [ 3081.462175][T30636] CPU: 0 PID: 30636 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3081.470999][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3081.481053][T30636] Call Trace: [ 3081.484331][T30636] dump_stack_lvl+0xd6/0x122 [ 3081.488919][T30636] dump_stack+0x11/0x1b [ 3081.493243][T30636] should_fail+0x23c/0x250 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xb00, &(0x7f0000000000)) 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x40000000, &(0x7f0000000040)) 17:33:05 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x500}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3081.497739][T30636] __should_failslab+0x81/0x90 [ 3081.502508][T30636] ? selinux_sk_alloc_security+0x61/0x120 [ 3081.508231][T30636] should_failslab+0x5/0x20 [ 3081.512735][T30636] kmem_cache_alloc_trace+0x52/0x320 [ 3081.518109][T30636] ? should_fail+0xd6/0x250 [ 3081.522616][T30636] selinux_sk_alloc_security+0x61/0x120 [ 3081.528162][T30636] security_sk_alloc+0x45/0x90 [ 3081.532923][T30636] sk_prot_alloc+0xd2/0x190 [ 3081.537427][T30636] sk_alloc+0x2e/0x220 [ 3081.541489][T30636] inet6_create+0x2b2/0x730 [ 3081.545987][T30636] __sock_create+0x2c7/0x4e0 [ 3081.550575][T30636] __sys_socketpair+0x1dc/0x810 [ 3081.555420][T30636] __x64_sys_socketpair+0x4e/0x60 [ 3081.560493][T30636] do_syscall_64+0x44/0xa0 [ 3081.564909][T30636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3081.570810][T30636] RIP: 0033:0x7f45a4158709 [ 3081.575226][T30636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:33:05 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff7f) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) [ 3081.594868][T30636] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3081.603301][T30636] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3081.611343][T30636] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3081.619357][T30636] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3081.627326][T30636] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3081.635312][T30636] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x80040000, &(0x7f0000000040)) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x600}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:05 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 16) 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xc00, &(0x7f0000000000)) 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000ffdbdf2501000040280006000a01010208000b00", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x41) r3 = socket(0x22, 0x2, 0xf0ee) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) 17:33:05 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)={0x10001, {{0xa, 0x4e20, 0x9, @private2}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x5, @loopback, 0x7f}}]}, 0x110) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x2000) [ 3081.760960][T30661] FAULT_INJECTION: forcing a failure. [ 3081.760960][T30661] name failslab, interval 1, probability 0, space 0, times 0 [ 3081.773621][T30661] CPU: 1 PID: 30661 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3081.782382][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3081.792529][T30661] Call Trace: [ 3081.795806][T30661] dump_stack_lvl+0xd6/0x122 [ 3081.800424][T30661] dump_stack+0x11/0x1b [ 3081.804576][T30661] should_fail+0x23c/0x250 [ 3081.808991][T30661] __should_failslab+0x81/0x90 [ 3081.813764][T30661] ? selinux_netlbl_socket_post_create+0xda/0x170 [ 3081.820176][T30661] should_failslab+0x5/0x20 [ 3081.824723][T30661] kmem_cache_alloc_trace+0x52/0x320 [ 3081.830084][T30661] selinux_netlbl_socket_post_create+0xda/0x170 [ 3081.836348][T30661] selinux_socket_post_create+0x1de/0x270 [ 3081.842064][T30661] security_socket_post_create+0x5d/0xb0 [ 3081.847706][T30661] __sock_create+0x329/0x4e0 [ 3081.852288][T30661] __sys_socketpair+0x1dc/0x810 [ 3081.857130][T30661] __x64_sys_socketpair+0x4e/0x60 [ 3081.862146][T30661] do_syscall_64+0x44/0xa0 [ 3081.866639][T30661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3081.872534][T30661] RIP: 0033:0x7f45a4158709 [ 3081.876936][T30661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3081.896578][T30661] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xd00, &(0x7f0000000000)) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x700}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x3, 0xe1, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3b, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x34, 0x3, 0x5, 0x4, 0x3, 0x1, 0x984, 0x0, 0x4f8, 0x0, 0x1000}, 0xffffffffffffffff, 0x5, r0, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[r1, r0, 0xffffffffffffffff, r2, r3, r0, r5, r0]}, 0x8) 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000a, 0x10010, r0, 0x10000000) 17:33:05 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmget(0x3, 0x2000, 0x800, &(0x7f0000ffa000/0x2000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) shmget(0x1, 0x3000, 0x200, &(0x7f0000ff8000/0x3000)=nil) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r1 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000100)) shmget(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0xcc020000, &(0x7f0000000040)) [ 3081.905068][T30661] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3081.913035][T30661] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3081.921053][T30661] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3081.929019][T30661] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3081.937035][T30661] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x900}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xe00, &(0x7f0000000000)) 17:33:05 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 17) 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x612c80, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x80, 0x2, 0xff, 0x4, 0x0, 0xe9b2, 0x200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0x400, 0x7bf9, 0x4b, 0x5, 0x200, 0x5, 0xff41, 0x0, 0x9, 0x0, 0x5}, r0, 0xffffffffffffffff, r1, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:05 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x24000000000, 0x8000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xf, 0x1}) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x676e7) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xa00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0xfeffffff, &(0x7f0000000040)) 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xf00, &(0x7f0000000000)) [ 3082.126838][T30725] FAULT_INJECTION: forcing a failure. [ 3082.126838][T30725] name failslab, interval 1, probability 0, space 0, times 0 [ 3082.139552][T30725] CPU: 0 PID: 30725 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3082.148316][T30725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3082.158365][T30725] Call Trace: [ 3082.161638][T30725] dump_stack_lvl+0xd6/0x122 [ 3082.166229][T30725] dump_stack+0x11/0x1b [ 3082.170436][T30725] should_fail+0x23c/0x250 17:33:05 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x1, 0x401, 0x7, {0x1, 0x7fffffff}, 0xfff, 0xffffff80}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:05 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xb00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3082.174846][T30725] ? security_netlbl_sid_to_secattr+0xb0/0x150 [ 3082.180994][T30725] __should_failslab+0x81/0x90 [ 3082.185775][T30725] should_failslab+0x5/0x20 [ 3082.190278][T30725] __kmalloc_track_caller+0x6d/0x350 [ 3082.195618][T30725] ? should_fail+0xd6/0x250 [ 3082.200156][T30725] kstrdup+0x31/0x70 [ 3082.204055][T30725] security_netlbl_sid_to_secattr+0xb0/0x150 [ 3082.210066][T30725] selinux_netlbl_socket_post_create+0xfe/0x170 [ 3082.216388][T30725] selinux_socket_post_create+0x1de/0x270 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0xfffffffe, &(0x7f0000000040)) [ 3082.222216][T30725] security_socket_post_create+0x5d/0xb0 [ 3082.227889][T30725] __sock_create+0x329/0x4e0 [ 3082.232474][T30725] __sys_socketpair+0x1dc/0x810 [ 3082.237325][T30725] __x64_sys_socketpair+0x4e/0x60 [ 3082.242433][T30725] do_syscall_64+0x44/0xa0 [ 3082.246854][T30725] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.252751][T30725] RIP: 0033:0x7f45a4158709 [ 3082.257155][T30725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:33:05 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x6, 0x4, 0x0, 0x8, 0x780a0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000040)}, 0x10, 0x8, 0x0, 0x9, 0xa97, 0x8, 0x0, 0x0, 0x6, 0x0, 0x100000001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x10000000) 17:33:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x1c0, 0x2, 'client0\x00', 0x4, "1b252c591c0fa8a8", "2e27a92b91cd6387bbdc3198e1032ae65a67f1fe3c5d2c7a0559d797f60854c8", 0x401, 0x4}) 17:33:05 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x1100, &(0x7f0000000000)) [ 3082.276781][T30725] RSP: 002b:00007f45a1ed0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3082.285350][T30725] RAX: ffffffffffffffda RBX: 00007f45a425cf60 RCX: 00007f45a4158709 [ 3082.293318][T30725] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 3082.301284][T30725] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3082.309247][T30725] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3082.317210][T30725] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:06 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) (fail_nth: 18) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xc00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7f, 0x400, 0x6, 0x5, 0x7fffffff}, 0x14) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000007c0)=""/4096, &(0x7f0000000080)=0x1000) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:06 executing program 5: waitid(0x2, 0x0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x1200, &(0x7f0000000000)) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/159, 0x9f}, {&(0x7f0000000100)=""/194, 0xc2}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000000380)=""/69, 0x45}], 0x5) [ 3082.453726][T30764] FAULT_INJECTION: forcing a failure. [ 3082.453726][T30764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3082.466791][T30764] CPU: 0 PID: 30764 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3082.475563][T30764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3082.485616][T30764] Call Trace: [ 3082.488896][T30764] dump_stack_lvl+0xd6/0x122 [ 3082.493485][T30764] dump_stack+0x11/0x1b [ 3082.497689][T30764] should_fail+0x23c/0x250 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) [ 3082.502160][T30764] should_fail_usercopy+0x16/0x20 [ 3082.507213][T30764] _copy_to_user+0x1c/0x90 [ 3082.511629][T30764] simple_read_from_buffer+0xab/0x120 [ 3082.517051][T30764] proc_fail_nth_read+0x10d/0x150 [ 3082.522139][T30764] ? proc_fault_inject_write+0x230/0x230 [ 3082.527767][T30764] vfs_read+0x1e6/0x750 [ 3082.531991][T30764] ? __fget_light+0x21b/0x260 [ 3082.536663][T30764] ? __cond_resched+0x11/0x40 [ 3082.541331][T30764] ksys_read+0xd9/0x190 [ 3082.545518][T30764] __x64_sys_read+0x3e/0x50 17:33:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x81, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, 0x7800, 0x20, 0x800, 0x7}}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x78d8c0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x40002001, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x20}, {0xfa, 0x81}, 0x0, 0x0, 0xa}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x6, 0x4, 0xfffffffd, 0x0, 0x8000, 0x6}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) [ 3082.550027][T30764] do_syscall_64+0x44/0xa0 [ 3082.554446][T30764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.560343][T30764] RIP: 0033:0x7f45a410b48c [ 3082.564746][T30764] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3082.584348][T30764] RSP: 002b:00007f45a1ed0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3082.592765][T30764] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f45a410b48c 17:33:06 executing program 5: r0 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) shmdt(r0) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5decc59fb1fdceef09a1cd6d", @ANYRES16=0x0, @ANYBLOB="d188ff0700000000000001000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c091}, 0x24000081) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x5c848) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x4) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) socketpair(0x2c, 0x2, 0x53, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000003c0)={0x67e, 0x0, 0x80000001, {0x6b, 0x8}, 0x2, 0x3}) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) [ 3082.600734][T30764] RDX: 000000000000000f RSI: 00007f45a1ed01e0 RDI: 0000000000000003 [ 3082.608702][T30764] RBP: 00007f45a1ed01d0 R08: 0000000000000000 R09: 0000000000000000 [ 3082.616670][T30764] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 3082.624639][T30764] R13: 00007ffffe1239bf R14: 00007f45a1ed0300 R15: 0000000000022000 17:33:06 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xd00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2000, &(0x7f0000000000)) 17:33:06 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(r0) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x9, 0x2, {0x3, 0x1, 0x8, 0x1, 0x10000}, 0xffffff31}) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x80, 0xfffffffa, 0x0, {{0x47, 0x4, 0x1, 0x1e, 0x11c, 0x64, 0x0, 0xff, 0x4, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xf7, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x3}]}, @generic={0x94, 0xb, "b2c7429600b2da8306"}, @timestamp_addr={0x44, 0x3c, 0x12, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x4}, {@multicast1, 0x40}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7beb}, {@multicast2, 0x6}, {@private=0xa010101, 0x96}, {@broadcast, 0x40}]}, @rr={0x7, 0x7, 0x80, [@local]}, @rr={0x7, 0x13, 0x8e, [@broadcast, @broadcast, @empty, @multicast1]}, @end, @timestamp_prespec={0x44, 0x3c, 0x4b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5b1f}, {@empty, 0x6}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x80000001}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0xa2, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x8}, {@rand_addr=0x64010100, 0x7}, {@loopback, 0x81}, {@broadcast, 0x40}, {@broadcast, 0x7ff}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x9}, {@multicast2, 0x1f}, {@rand_addr=0x64010102, 0x4}, {@loopback, 0x7}]}, @timestamp={0x44, 0x8, 0x2c, 0x0, 0x8, [0x101]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r0, 0x2f, 0x3, 0x8b, 0xef, 0x10, @dev={0xfe, 0x80, '\x00', 0x11}, @local, 0x7, 0x40, 0x101, 0x6c8}}) 17:33:06 executing program 2: read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/251, 0xfb) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @timestamp, @sack_perm, @window={0x3, 0x400, 0x3fb}, @window={0x3, 0x4, 0x3}, @sack_perm, @sack_perm, @mss={0x2, 0x44ff}, @mss={0x2, 0x7f}, @sack_perm], 0xa) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x800, 0x1, 0x507}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000180)={@mcast2}, 0x14) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xe00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x7000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2d00, &(0x7f0000000000)) 17:33:06 executing program 3: socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf2501000000140006006272696467793000000000000000000014000300fc0100000000000000000000000000012700070073797374656d5f753a6f626a6563745f723a70616d5f7661727f72756e5f743a7330000014000300fe8000000000000000000000000000bb14000200fe800000000000000000e500000000aa0500010001000000050001000000000014000300fe8000000000000000000000000000aa"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r2, 0x10000000) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = socket(0x4, 0x80000, 0xe0000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'gretap0\x00', r1, 0x1, 0x7, 0x7f, 0x4419, {{0xe, 0x4, 0x3, 0x3d, 0x38, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x1b, 0xc8, [@remote, @empty, @multicast1, @private=0xa010102, @local, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xf00}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 3: socketpair$nbd(0x5, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4000, &(0x7f0000000000)) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x1c81, &(0x7f0000000040)={0x0, 0x3b96, 0x2, 0x1, 0x1f2, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x810, r1, 0x10000000) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1100}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 3: socketpair$nbd(0xf, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c8deade}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76fe74a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefa3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26dab4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa502}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x185f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e0301d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa149}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x716347b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c2cdda8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87a6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x208363fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d16581e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x524d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc936}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe973}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a1ffd4e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc986075}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ce784cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x139eb0af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x656a09b4}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60109522}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2db030e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x643d8d1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59badd7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x590fefc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749e6309}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e9837fa}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x10}, 0x10) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40420000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x7000) shmdt(r3) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmdt(0x0) r4 = socket(0x1a, 0x800, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000300)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4800, &(0x7f0000000000)) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x110, 0xffffffffffffffff, 0x10000000) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1200}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x4, 0x11, r0, 0x10000000) 17:33:06 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xff) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4) shmget(0x1, 0x3000, 0x400, &(0x7f0000ff9000/0x3000)=nil) 17:33:06 executing program 4: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)={0x9, {{0xa, 0x4e20, 0x7, @local}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}}, {{0xa, 0x4e21, 0x8, @mcast1, 0x1900}}, {{0xa, 0x4e23, 0x80000000, @private0, 0x8}}, {{0xa, 0x0, 0x9, @mcast1, 0x4}}, {{0xa, 0x4e24, 0x4, @empty, 0x10000}}]}, 0x310) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380)={@loopback}, &(0x7f00000003c0)=0x14) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4c00, &(0x7f0000000000)) 17:33:06 executing program 3: socketpair$nbd(0x10, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1300}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 3: socketpair$nbd(0x11, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6800, &(0x7f0000000000)) 17:33:06 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x200000a, 0x40010, r0, 0x10000000) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x3201}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) 17:33:06 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6c00, &(0x7f0000000000)) 17:33:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x13, 0x400, 0x70bd2a, 0x25dfdbfb, {0x1f, 0x1, 0x1, 0x21, {0x4e24, 0x4e20, [0x2, 0x6, 0x41, 0x1], [0xfb94, 0x7ff, 0x4c74bf23, 0x2], 0x0, [0x0, 0x2]}, 0x90c, 0x35}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "d18bd781e150cbc402fd4a89090b75ea81"}]}, 0x64}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xa4e5, 0x2, 0x2, 0x0, 0x800, 0x5}, 0x20) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:06 executing program 3: socketpair$nbd(0x2d, 0x1, 0x0, &(0x7f0000000040)) 17:33:06 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x100000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:06 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000080)={'\x00', 0x10001, 0x0, 0x62}) 17:33:07 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0xa59a7c81d41acdcb, 0x4000010, 0xffffffffffffffff, 0x10000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 17:33:07 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7400, &(0x7f0000000000)) 17:33:07 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:07 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7a00, &(0x7f0000000000)) 17:33:07 executing program 3: socketpair$nbd(0xa, 0x2, 0x0, &(0x7f0000000040)) 17:33:07 executing program 4: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/135, 0x87, 0x2000, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private1, 0x79}, 0x1c) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x2000) r0 = syz_io_uring_setup(0x5a20, &(0x7f0000000040)={0x0, 0xb945, 0x20, 0x3, 0x199}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10031, r0, 0x10000000) 17:33:07 executing program 5: shmget(0x0, 0x1000, 0x2, &(0x7f0000eb7000/0x1000)=nil) shmget(0x1, 0x2000, 0x748f30b0d23fdef3, &(0x7f0000eba000/0x2000)=nil) r0 = shmget(0x1, 0x3000, 0x8, &(0x7f0000eb5000/0x3000)=nil) shmat(r0, &(0x7f0000eb6000/0xb000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:07 executing program 3: socketpair$nbd(0xa, 0x3, 0x0, &(0x7f0000000040)) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x8004, &(0x7f0000000000)) 17:33:07 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x7365, &(0x7f0000000080)={0x0, 0x2267, 0x0, 0x2, 0x108, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:33:07 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) 17:33:07 executing program 3: socketpair$nbd(0xa, 0x4, 0x0, &(0x7f0000000040)) 17:33:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x65b1, &(0x7f0000000040)={0x0, 0x6d56, 0x8, 0x0, 0x344, 0x0, r0}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0xffffff80) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x180800) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) read$ptp(r0, &(0x7f0000000140)=""/95, 0x5f) 17:33:07 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x2000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xcc02, &(0x7f0000000000)) 17:33:07 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmdt(r0) 17:33:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x0, 0x1}, {0x1f, 0x81}, 0x1, 0x3, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:07 executing program 3: socketpair$nbd(0xa, 0x5, 0x0, &(0x7f0000000040)) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x200000, &(0x7f0000000000)) 17:33:07 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:33:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x10010, r0, 0x10000000) r1 = syz_io_uring_setup(0x65f9, &(0x7f0000000080)={0x0, 0xe098, 0x0, 0x2, 0x100}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x23) 17:33:07 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xffffffff, 0x401, 0x1, {0x7, 0x80000001}, 0x0, 0x8000000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x20, 0x2}, {0x7, 0x98}, 0x4, 0x0, 0xe0}) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x1000000, &(0x7f0000000000)) 17:33:07 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2000000, &(0x7f0000000000)) 17:33:07 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x3000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:07 executing program 3: socketpair$nbd(0xa, 0x6, 0x0, &(0x7f0000000040)) 17:33:07 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000080)=""/4096, 0x1000) 17:33:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x600800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x80010, r0, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1f, 0x4, 0x6, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@local}, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2a, 0x4, 0x6) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f0000000600)={{0xff, 0x3f}, 'port0\x00', 0x1, 0x14104e, 0xc4, 0xff, 0x400, 0x8, 0x7f, 0x0, 0x5, 0x8e}) accept$inet6(r5, 0x0, &(0x7f00000005c0)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe8, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x44, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x15}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x60, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40881}, 0x24008890) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x78}}, 0x40000c0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@initdev}, &(0x7f0000000100)=0x14) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) 17:33:07 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x3000000, &(0x7f0000000000)) 17:33:07 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x4}, 0x1c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:07 executing program 3: socketpair$nbd(0xa, 0xa, 0x0, &(0x7f0000000040)) 17:33:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000080)=[r0, r2, r3, r0, r0]}, 0x5) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4000000, &(0x7f0000000000)) 17:33:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffe6b, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x0, 0x9, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001c044}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{0x303}, "4a39a70c810ec288", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "ff224529f56dfb98"}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket$inet6(0xa, 0x80007, 0x101) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="50050976327669d951399cd228476202", 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x5000) 17:33:07 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x4000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:07 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x5000000, &(0x7f0000000000)) 17:33:07 executing program 5: ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000)) r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmdt(0x0) shmdt(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b5fec146749aa02ef9d1f612da47e162812b0898d67644338a", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25030000000c0004002000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x8801) 17:33:07 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0xdd2, &(0x7f0000000040)={0x0, 0x20058f5, 0x1, 0x400002, 0x258, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0xcb2, &(0x7f00000001c0)={0x0, 0x6, 0x1, 0x0, 0x165, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_setup(0x4ce3, &(0x7f00000002c0)={0x0, 0xc8af, 0x2, 0x0, 0x370, 0x0, r5}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r4, 0x10000000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x9, 0x4, "584f504b1a958b87bba294b54dd678ff9001d7b24d59cc1df5477fd4cb7dcf5be4f9deb3ca990d1a279a9efc5a7e135b4d14b6b2e2366ad0dd41b4a3bdef0580", "2ff7adbbc249644d790e42acfad5114fd5cc4efff5e399ba9a441d1a613821a5447f73e2218aa8158a72b55bc4d840639b0256da4e1be8ac6c17461b6242d6b6", "4ffc4f31b49fe2bfa7611e2fed31a3f49ef416f35f0530d4cf395228e2a0ff34", [0x38a9, 0x8000]}) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6000000, &(0x7f0000000000)) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x10, 0x0, &(0x7f0000000040)) 17:33:08 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:08 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x5000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1b, 0x0, &(0x7f0000000040)) 17:33:08 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:08 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7000000, &(0x7f0000000000)) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x2b9, 0x0, &(0x7f0000000040)) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:08 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x5000) r0 = socket$inet6(0xa, 0x4, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/84, 0x54, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffff800, @mcast1, 0x7ff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100)=0x6, 0x4) 17:33:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x9, 0x0, 0x0, 0xa5, 0x7, 0xfffffffe}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r3, 0x10000000) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x8000000, &(0x7f0000000000)) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x9000000, &(0x7f0000000000)) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x300, 0x0, &(0x7f0000000040)) 17:33:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x6000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x9, [0x200, 0x7ff, 0x9, 0x8, 0x3, 0x0, 0x8, 0x1]}, 0x5c) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000600), 0x3, 0x20840) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000780)={&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000680)=""/201, 0xc9}) r2 = syz_io_uring_setup(0xdf4, &(0x7f0000000500)={0x0, 0xaa7d, 0x10, 0x3, 0x228}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) socketpair(0x1f, 0x3, 0x2, &(0x7f00000007c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r2, 0x10000000) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000040)) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xa000000, &(0x7f0000000000)) 17:33:08 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) read$usbmon(r0, &(0x7f0000000040)=""/58, 0x3a) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x10001) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1, 0x2, &(0x7f0000000040)) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x110, 0xffffffffffffffff, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) shmget(0x2, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xb000000, &(0x7f0000000000)) 17:33:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xe) 17:33:08 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:08 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x40) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x7000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1, 0x3, &(0x7f0000000040)) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xc000000, &(0x7f0000000000)) 17:33:08 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, 0xffffffffffffffff, 0x10000000) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xd000000, &(0x7f0000000000)) 17:33:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r0, 0x10000000) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1, 0x4, &(0x7f0000000040)) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xe000000, &(0x7f0000000000)) 17:33:08 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc7f47664f6979c32}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1064, 0x12, 0x100, 0x70bd2c, 0x25dfdbff, {0x9, 0x0, 0x7, 0x46, {0x4e24, 0x4e23, [0x0, 0x2, 0x10001, 0x8], [0x5, 0x7, 0x5, 0x6], 0x0, [0x119, 0x4]}, 0x38000000, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "01b22aeaec0422a61ae2a6cd5ab033"}]}, 0x1064}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmdt(r0) r1 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000000, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) 17:33:08 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x8000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:08 executing program 3: socketpair$nbd(0xa, 0x1, 0x5, &(0x7f0000000040)) 17:33:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private2, 0x5e}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:08 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmget(0x1, 0x400000, 0x78000000, &(0x7f0000bfe000/0x400000)=nil) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x4, 0x7}, {0x2f, 0xa}, 0x7fff, 0x4, 0x4}) shmat(r0, &(0x7f0000cdb000/0x3000)=nil, 0x1000) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xf000000, &(0x7f0000000000)) 17:33:08 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x2e0, 0x15, 0x1, 0x70bd25, 0x25dfdbfc, {0x9, 0xa9}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "609385db133142"}, @INET_DIAG_REQ_BYTECODE={0x1bd, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "84ecb2ab6bcb0a2ecbe2511aa638c084810434f053f47c4c"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "c5e53f53edec72058ba2ca25a62a57f17a6b3e9c9c6490186c6f60f87d4751109057adde4a452c5b3614d52c0780b4033a74aaa10286aef3f450bc7ae9e01bb658190d586e5e048e1c0a8e913643e16d1bed7644655f411aaead685fc7eddca3634ba247e1c08b443c5537db662f8f465aa128978cf876882594365f445fe36dbbc9275431ac8ba899ea03424afd71c2d9752de34fdc8f9e1afb3ca7b0c4b675ab1a630d54e14ec5e9886066d4947938dbf24f2de422a4731d9f0bdc1cbd64e3976d7afe84091ced0a8fdf68436cab507d8888ae4b54723a90b6f5b81f011e43"}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x44891}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x578b, &(0x7f00000000c0)={0x0, 0xedd7, 0x2, 0x1, 0x144, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x6000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r1, 0x2403, 0xb39a, 0x1, &(0x7f00000001c0)={[0x3]}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000300)=""/53, 0x35, 0x21, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b0d00cb855acb071", "9dee66f52f10f7c505cdef74a51d9d5a", "a2f8a10e", "d7cb09143b8c6f4f"}, 0x28) 17:33:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x10000000, &(0x7f0000000000)) 17:33:09 executing program 3: socketpair$nbd(0xa, 0x1, 0x6, &(0x7f0000000040)) 17:33:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x1e, 0x2, 0x80, 0x0, 0x7, 0x20000, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x91ba, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10, 0x7, 0x0, 0x2, 0x80000001, 0x81, 0xffff, 0x0, 0x8000, 0x0, 0x101}, 0x0, 0x6, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x800) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x64300, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x20010, r1, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 17:33:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x11000000, &(0x7f0000000000)) 17:33:09 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x3000) 17:33:09 executing program 3: socketpair$nbd(0xa, 0x1, 0x7, &(0x7f0000000040)) 17:33:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x12000000, &(0x7f0000000000)) 17:33:09 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) r3 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) r4 = socket(0x1, 0x3, 0x0) recvfrom$inet6(r4, &(0x7f0000000180)=""/28, 0x1c, 0x40002000, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @local, 0x80000001}, 0x1c) 17:33:09 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = shmget(0x0, 0xb000, 0x4, &(0x7f0000ff5000/0xb000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x2000) 17:33:09 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x9000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:09 executing program 3: socketpair$nbd(0xa, 0x1, 0x10, &(0x7f0000000040)) 17:33:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002280)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000022c0)=0x10) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x8010, r1, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/222, 0xde}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/186, 0xba}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000002300)=""/60, &(0x7f0000002340)=0x3c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000002240)=[@timestamp, @sack_perm, @timestamp, @mss={0x2, 0x4}], 0x4) 17:33:09 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) r1 = fork() pidfd_open(r1, 0x0) 17:33:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x2d000000, &(0x7f0000000000)) 17:33:09 executing program 3: socketpair$nbd(0xa, 0x1, 0x106, &(0x7f0000000040)) 17:33:09 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xa000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x40000000, &(0x7f0000000000)) 17:33:09 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0x81, 0x7}, @sack_perm, @sack_perm, @mss={0x2, 0x6}, @window={0x3, 0x7, 0x7}, @sack_perm], 0x7) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:09 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0xfffffbc0, 0x4, 0x1bc, 0x7}, 0x14) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x48000000, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x2cc, &(0x7f0000000040)) 17:33:10 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xb000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:10 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0xe000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000203f6369bcbf0594a6d135d9c262ee451153e27287e046ca3eb1707a39a12813d72eee89e7cc9deb249e0d32f515c0dbf2", @ANYRES16=r2, @ANYBLOB="000427bd7000fcdbdf25030000001c00078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c0005000e01000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40050) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x22000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000000c0)) 17:33:10 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x300, &(0x7f0000000040)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x450) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:10 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x3000)=nil, 0x2000) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x4c000000, &(0x7f0000000000)) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x68000000, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x480, &(0x7f0000000040)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x1196, &(0x7f0000000040)={0x0, 0x6663, 0x0, 0x2, 0x1b9, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0xd, 0x11, r1, 0x10000000) 17:33:10 executing program 4: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xc000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:10 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x6c000000, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x500, &(0x7f0000000040)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 17:33:10 executing program 4: r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffa000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmdt(r1) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000080)={'\x00', 0x1, 0x2, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000100)={0x400, 0x2d49, 0xfff, {0x10000}, 0x2, 0x6}) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/103, 0x67, 0x2000, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @remote, 0x6}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x600, &(0x7f0000000040)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/146, 0x92}, {&(0x7f0000000100)=""/238, 0xee}], 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1058c1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x7, 0x12, r1, 0x8000000) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x74000000, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x601, &(0x7f0000000040)) 17:33:10 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000fee000/0x12000)=nil, 0x3000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000005863ca7bd6ebbf952b338e87344331bbbc4eec5e56eb084f4e6fcec026cd82371e977613ee9bd634483b51855df015c54988ad9f653c775b9a56a0e1011ce280918e1fe996af06f692f8be7e5d07cb9ae46964f5d2ac469ca617915d199543716793f274d2fc424feab1555ba3ae7fdc7f0dd78353fd466fe9386c03e7c702b1a6594a1fd75a467f9567c28d4d657cf308cd96e3689144ba21ef49f60b9456128ccb62079de89827ee6861db5e6f5bd2faab37925d2885e33769e2ba3d6d28dff431d972", @ANYRES16=r2, @ANYBLOB="040029bd7000fbdbdf2508000000080005000a0101002c00070073797374656d5f753a6f626a6563745f723a70616d5f636f6e736f6c655f657865635f743a73300008000500ac1414bb08000500ac141416"], 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) shmget(0x3, 0x2000, 0x1, &(0x7f0000ffb000/0x2000)=nil) 17:33:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xd000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x6, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x10000000) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9) 17:33:10 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffa000/0x2000)=nil) r0 = shmget(0x0, 0x2000, 0x400, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) 17:33:10 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x2010, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="e481ae7d181bc3fbdc7c82a41041b6ef", 0x10) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x700, &(0x7f0000000040)) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x7a000000, &(0x7f0000000000)) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x80040000, &(0x7f0000000000)) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x300000b, 0x6adef6de8f1cc2be, r1, 0x10000000) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x2000, &(0x7f0000000040)) 17:33:10 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x7000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x9, 0x8, 0x1, 'queue0\x00', 0x5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x4, 0xfff0000, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@end, @noop, @lsrr={0x83, 0x2b, 0x6c, [@remote, @multicast1, @local, @multicast2, @multicast2, @private=0xa010102, @broadcast, @empty, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0xa, [{@local, 0x20}, {@loopback, 0x3ff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x8000, 0x10, 0x6, 0x7fff, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0xb, 0xc1, [@private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x3, [{@multicast2, 0x2}]}, @noop, @noop, @noop]}}}}}) socket(0x27, 0xa, 0x6) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xcc020000, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x4000, &(0x7f0000000040)) 17:33:10 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x143f260d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x743f94c8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x505675eb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a6243e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x207b}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040001}, 0x8084) 17:33:10 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xe000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0x8004, &(0x7f0000000040)) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xfeffffff, &(0x7f0000000000)) 17:33:10 executing program 4: r0 = io_uring_setup(0x40df, &(0x7f0000000040)={0x0, 0x8fc2, 0x10, 0x0, 0x288}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000100)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x307, &(0x7f0000000200)={0x0, 0x7a33}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r3) 17:33:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xfffffffe, &(0x7f0000000000)) 17:33:10 executing program 3: socketpair$nbd(0xa, 0x1, 0xcc02, &(0x7f0000000040)) 17:33:11 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[r2, r0, r1, r1, r1, r3]}, 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:11 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0xff0f, &(0x7f0000000040)) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x200000, &(0x7f0000000040)) 17:33:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xf000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x38200, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:11 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e22, 0x6af, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x100, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}, 0x3, [0x81, 0x2, 0xffff, 0x9, 0x80000000, 0x5, 0x1, 0x3ff]}, 0x5c) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x2af, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x7800, 0xc822, 0x5}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="bf1a4bc971259e4cb54b139f201a3f06", 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0xcc57}) syz_open_dev$usbmon(&(0x7f0000000240), 0x101, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) 17:33:11 executing program 0: r0 = shmget(0x1, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:11 executing program 5: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff7, 0x4100) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r1 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r1) shmdt(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_buf(r4, 0x6, 0xe, &(0x7f00000000c0)=""/152, &(0x7f00000002c0)=0x98) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7f) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x1000000, &(0x7f0000000040)) 17:33:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r2 = io_uring_setup(0x12fc, &(0x7f0000000040)={0x0, 0xef0c, 0x10, 0x3, 0x344, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x10000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 17:33:11 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0xa000) 17:33:11 executing program 5: socket$inet6(0xa, 0x2, 0xa7) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 17:33:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) r0 = io_uring_setup(0x72a3, &(0x7f0000000080)={0x0, 0xa16c, 0x4, 0x2, 0x105}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20051, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x1000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x208, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff256}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010010}, 0x4040000) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x2000000, &(0x7f0000000040)) 17:33:11 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x8000000) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x10000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:11 executing program 2: ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000000c0)={0x2, 0xdc, 0x8}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000040)=""/41, 0x29, 0x40000001, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @local, 0x479}, 0x1c) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x3000000, &(0x7f0000000040)) 17:33:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x3cd9, &(0x7f0000000040)={0x0, 0x6d3c, 0x10, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x110, r4, 0x8000000) 17:33:11 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x4000000, &(0x7f0000000040)) 17:33:11 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:11 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x5000000, &(0x7f0000000040)) 17:33:11 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x0) 17:33:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1, 0x3, 0xfffffff4, &(0x7f0000000000)) 17:33:11 executing program 5: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r1 = shmget(0x2, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) shmdt(r0) shmat(r1, &(0x7f0000ff9000/0x3000)=nil, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:11 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x11000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x48a802, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x6000000, &(0x7f0000000040)) 17:33:11 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x14, 0x1, {0x1, 0x3, 0x4, 0x0, 0x1}, 0x6}) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2c, 0x0, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000680)=@ccm_128={{}, "066e187663547978", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000600)) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000000c0)={{0x1, 0x7fffffff}, {0xffff, 0x4d}, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xffffffffffffff03, 0x0, 0x9, 0x3, 0x1, "43d1f5d07cfdf889ff269808fa173dd9560b66f941f4715656bc7464a9eed3a7e46dd6d515c42e5608479df5e87f24c5a65b5c12f88319308742a9afe5b16cd7", "121c234e2f1b2d86903e7921209552a8843537b04189e4ea5500eeed847a5c9e3279a25a63514e273bbaa6f4156b28b5457d94955556d5ea230248dc8b09e100", "2ca0720567e6889f9fe61f62cefb3a6a51b862923210df42f793e507ae9e20e6", [0x0, 0x88]}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x390, 0x13, 0x200, 0x70bd2a, 0x25dfdbfb, {0x8, 0xff, 0xcf, 0xf7, {0x4e24, 0x4e20, [0x9, 0xffff, 0x1, 0x7], [0x7, 0x42a79c18, 0x0, 0x1b], 0x0, [0x80000001, 0xfff]}, 0x1e4d, 0x16a}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "b930106cac8f705038132ed3"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "27d69cdd6555540d4997eca7b9d82e988408b1af8c91e6879b6f5fd6763624b627f32caff3ffd4561fec898a2ff91992b1094ff19f19fbc06f9999699575430afc6a1389c3526a404e1fdc63121694"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "18b8fe6fbd7bfa326089d2c85c2b956c8c84f255d2a9c3ee94cc2c8942789e321682016856750f0b2cf39953842a7761601c93aa187f7ce915a0b5fdd7787d4ab588e3e098f88ca96dec51564735837de75ef7a24b9898dc981b34cbb83a11a6f9cb53b49ace42faf42b4f67e39825b4dfed25723296ea06744ee037ab3a00595bf44483a9d2558affef74116e54078ef3273be3e3b17cea97980d4530025d28ca3c82f191e1008151c4f50dc61817272857456c80bba8aed87fef852a6e2003754d66002b09c9f482d75dd55156ab77fd"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "ff9e6a6973dc1d2fa2589b8a3b9afa29171c583c889f207a3c7bf181bd02e084aae8eb01"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "d73e0ee4027d9af8f82497d55437171c70f4d8a3516d0b0eb3e9fe9ad68b614ea32a3f8348409d53db1166b09c3bcfc1a52d7d023a656f9b36f80133641edfa3aa40c00a4cbc877a39ccd96cbdbe561cde8d5179d1c66b170922263905ac81d689e66a7a49b4d41b5641e8fc34149882c0e98679e22273f7f7633355cdfc2db6fe3bbe67adb1b3f9eba6f368876a8a768f0b6d77178f4f0620ec0a62d2593feb13e0cb201a326d270647642da0eb8c8dbf1c93f0e98a68bbfa3e74be0324e404105c02f71797ad6693ae0a846d1d6c143c81b4865d1e57823ea8"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "2d51b77d7307802e75002753d6defd01eaf05a46e58136d04c68a9342f91ca758f1f54e730a7dc403712d7def71c35fce720d5fb8bbc56c9907c2c4884e0c9fda30b633779c8a430c5dadd2a49c98b36a5c216c90d7839b6e58d1ab6a23c54ca8215c6166bd0dab3a5336315bd287049e3f9609d6d5ed31c7149440fad8ed60e1a4d4bcd740327f4e9d27f51ce713806"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "48a148e083609a672a1b842940fc89ee4e66914ae85dcd2f5d4a4aa8533de497c753afe97d6ce5d120125a70a36503c1fc3b5876343fe6"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "63b9f7cb895cd1009f3e47e557e173b66232e37e940b61210ce3b704d22a838e99e21e0cfc47cb5a4485c779"}]}, 0x390}}, 0x40041) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x6010000, &(0x7f0000000040)) 17:33:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x24088004) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x5a700, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r4, 0x10000000) 17:33:11 executing program 4: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000008800000049ad29397eeb49ba57c3ec5daf57b06761ef2e97809e4375109834dd7bf5ddc1a16af642e83abebe12547e8f9b0d4131ee26de076619bf8023378f430e2f389f689c34c3dd9fc4cfa388da345286f881d1e929596a46e5d35d54993daa5a3b6b392a2714122817fa2db9fecbf35dedeec04cfa70a883a7fbed5449c9"], &(0x7f0000000100)=0xac) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x1, 0x80, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x89, 0x7800, 0xfffffc01, 0x7}}) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) 17:33:11 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7, 0x9, 0x0, @loopback, @local, 0x80, 0x8, 0x80000001, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x2f, 0x2, 0x3, 0xffffff81, 0x40, @mcast2, @loopback, 0x7, 0x80, 0xffffff2d, 0x3}}) 17:33:11 executing program 3: socketpair$nbd(0xa, 0x1, 0x7000000, &(0x7f0000000040)) 17:33:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x6, 0x0, &(0x7f0000000040)) r0 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) socket$inet6(0xa, 0x4, 0x0) 17:33:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x20000) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:33:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x12000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0x10000000, &(0x7f0000000040)) 17:33:12 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="6772657461703000000000008d1db61b", @ANYRES32=0x0, @ANYBLOB="0080ff4700000005000000004e0000380068000001299078ac1414bb640101018907ffac1e0101441c574000000009000000060000000100000004000005140000359b00"]}) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = syz_io_uring_setup(0x386e, &(0x7f0000000080)={0x0, 0x40b7, 0x4, 0x1, 0x2c2}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x328e, 0x0, &(0x7f0000000140)=[r0, r2]}, 0x2) 17:33:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf, 0x2, 0xffffffff, &(0x7f0000000000)) socketpair(0x22, 0xa, 0xfff, &(0x7f0000000040)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0x20000000, &(0x7f0000000040)) 17:33:12 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "3cffa22944075480", "608c545dee9f1abcbe6f6f836df939af", "2c4c9102", "bc47000000000008"}, 0x22) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14) 17:33:12 executing program 4: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ff7000/0x4000)=nil, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250500000006000b002a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x497ffffc12f7f655}, 0x80) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0x40000000, &(0x7f0000000040)) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffb15a}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x13000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r2 = io_uring_setup(0x252f, &(0x7f0000000080)={0x0, 0x6968, 0x2, 0x2, 0x14}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000100)=[r3, r1]}, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0, r4, 0xffffffffffffffff], 0x3) 17:33:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) socketpair(0x0, 0x3, 0x10000000, &(0x7f0000000000)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0x80040000, &(0x7f0000000040)) 17:33:12 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) getresuid(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x50101) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x34002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}, {}, 0x0, 0x0, 0x2}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@private2}, &(0x7f0000000200)=0xffffffffffffff43) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x804) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xa7ffffff, &(0x7f0000000040)) 17:33:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmdt(r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000000)={{0x9, 0x8}, {0xffffffff00000001, 0x9}, 0x80}) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0xf, 0x6, 0x7, 0x2, 0x0, 0x3, 0x200, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x6}, 0x3, 0xffffffffffffdfd1, 0x1, 0x2, 0x4, 0xde, 0xffff, 0x0, 0x8, 0x0, 0x3ff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0x100000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xcc020000, &(0x7f0000000040)) 17:33:12 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 17:33:12 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x32010000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x4, &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xfeffffff, &(0x7f0000000040)) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xb7}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x48000) 17:33:12 executing program 0: socketpair(0x21, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x2983, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x0, 0x0, 0x1, 0x0, "d11f0c3f5e24f3324de6e61a2cd6abab542366fd3bd319331404670dd4a791cfbff9fef3acb418abfdad3a182bc302d7a10e7104b0ba71f8d23566d2c7b050c59d8c94ee7bfac5616709cd3ba56bec5d"}, 0xd8) 17:33:12 executing program 4: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xff0f0000, &(0x7f0000000040)) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0x7, 0x8, 0x1, 'queue0\x00', 0x43c4}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x3, 0x5, 0x0, 'queue1\x00', 0x67d}) 17:33:12 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xffffffa7, &(0x7f0000000040)) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x0, 0x80}, {0x7, 0x6}, 0x1, 0x0, 0x81}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x5, 0x2, 'client0\x00', 0xffffffff80000000, "3556c32b63db541c", "3e8cabc82313d89036115411bc254147f532138fab91526d76a5f0f21957959d", 0xc728, 0x6e}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x10000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:12 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:12 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:12 executing program 0: shmget(0x3, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0xfffffffe, &(0x7f0000000040)) 17:33:12 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x29, 0x1, 0xffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7ff, @empty, 0x4}, 0x1c) 17:33:12 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x100000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x1d7c, 0x8, 0x771a, {0x0, 0x8}, 0x8, 0x7f}) 17:33:12 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:12 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xf, 0x2, 0x5, &(0x7f0000000040)) r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) 17:33:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x7}, "d1e9eed62f6a23a3", "751777dd7460692c24d86ccdb5016e5b", "567ce57d", 'H\x00'}, 0x28) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x4, 0x0, 0x1f, 0x1, 0x101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 3: io_uring_setup(0x7130, &(0x7f0000000040)={0x0, 0x67fe, 0x8, 0x1, 0x184}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x200000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x100000a, 0x11, r0, 0x10000000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000040)=""/78, &(0x7f00000000c0)=0x4e) 17:33:13 executing program 5: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}}, 0x4000000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xcb, "7bbf49bd341eb711d6e4b78024ade66df3859faa7ccb1fd790c9027307c1c4890efb2e97559a9d0a2eef8498dd4c71a86df735c580f8619dcee7e5b0d052cd02125d52cb407037c2d79cc20920d228341553b88c1a8647fbb443945eaa8d4ac53595c5d681594bebce66e1ef43f912f78f432f144589ddee1cf003557207026ad7949b159f961df9e54fc4f1fbd11bb7f790743084e55a7cb6d19e15c470b9fc850c6234ca170fe9d21a95ff476556e224a6a760bb9d011d34bcff2f4a71c45694ef52843d31ecc6c339e4"}, &(0x7f0000000140)=0xef) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x16) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e20, 0x2f8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb3d}}}, 0x88) 17:33:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000040)) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x300000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000e, 0x11, r0, 0x10000000) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x800871af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x23f4, &(0x7f0000000080)={0x0, 0xcc09, 0x1, 0x0, 0x3c9, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x400000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 3: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdb7d, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xfffffff8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x6f69be13e201e410) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbd37}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x841) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x500000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5aac}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000080000}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}}, 0x4000080) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:13 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f000093f000/0x3000)=nil, &(0x7f0000718000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000140)={{0x995c, 0x1575}, {0x8, 0x1}, 0x9, 0x1}) syz_io_uring_setup(0x7102, &(0x7f0000000040)={0x0, 0x5144, 0x2, 0x3, 0xb5, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r0, r0, r0, r0, r0], 0x7) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x600000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x25, 0x80006, 0xffffffff, &(0x7f0000000000)) 17:33:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868cb24315f887cc152", "00ee0300", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x79}) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x64182, 0x0) read$ptp(r1, &(0x7f00000001c0)=""/247, 0xf7) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_io_uring_setup(0x5369, &(0x7f0000000080)={0x0, 0xe3e4, 0x2, 0x1, 0x392, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 17:33:13 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x700000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200180, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/213, 0xd5) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:13 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x800000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x534, 0x15, 0x100, 0x70bd29, 0x25dfdbfc, {0x8, 0x2f}, [@INET_DIAG_REQ_BYTECODE={0xca, 0x1, "091001b1eccf9ec77d5d525cc70058946b10700007a051c54fdb16e69d117da6a74fbcd154e16f51a616e1be78a9839c9103d521da4bb16c38b2cacb318b92b92aaa89acdbe7661a22f3bb0ece58d50c7146ea185b1fbe29ae7cac2f96802492b16fa475094dc991e15b41ecdef168c9fdc19338d97049bdcda1b01410cf5f41ad0fd9718ee1488bd99ee8fcd2c9dd91ae301ae7e0607594e6ea24d51f96521e136a08ab95a0bef51789dc888a6dee75731bddc101b3d8924af45009139286fb8990d46249f7"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "1750c2c3c46e858d60319b4712fe2b62b9f3419fae3aa5c15cce34b8326d58be0d0ecf27908439faa1d69c6773c5d52fc5c13deb57bda5250c8a0c0fbc858d69d7cc55fac016715ca2961e42afaa6a0a3e8d1947742714e150e4903e02de49cbe778eb679489c14d15e329501974d19c09d41f6f047e2823292b0e18ff9e447d643e4d630fcfd7f74813960b186c14bd24e244661b24d044a15db2ae67db5c856997d932866a81"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "0d89056cda4d1bb4c0aef32db0addac6a10cb3fc53dea09031d5a6bc1a031190249e268f8bd7aab48ef87a05fa0458947220974f1ca821bc79c055f9f36a6953e2f6c78ae3c08fa96afadaf7a1fb38a1e7b944aba3b449bbb6c7204819ab993e5a72e172b56f78892547c26b600d27b3a36e475d25813c16beca16a3acdf6f92bbdd8a2e49cf24ab7d03bc7e28d1ca49bc2b10f8106c8d175fd3ec1dfb6fabb86f4ff8498aff818d3da35c0fbc9fb3048d672695d9732095b9b5494363be085b330288148dddb08be94998fd0031"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "115d38ff121de595e8efc12bdadfe7a0f20556741080c3c7e7db14686ac9dbbe7c77af778b25d7e4f323028a7ec1f997e73e8081423bd6a253d99cf0b0cb02aef076df1f8ae1883fde1ce68c906c3d3e8e0c094b19deb18e223426054b336c7f649849f09ea75399c323b2d441a1b61874ae599160eecaa3c2844cc594cfd4b8f3acbd503da3d44b415fc8da52fbca140be461599527560290a58537275644ab50471da8a40c2823e0"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "deb04495a71e6a60b662a2f6f96f4468f71dbe433f893e046f56ba1cbf9ac53ea37f0cf51decc11ce441e30eb3ef1766480c4dc3f013cb048eab03b1b130ef201ad779215a3a7b1217771cf175b4f11096e4b46e34c4e3ea6e9a67a4dbcaee1ddde7fdb4f6a4382a70a1f7ab46b844b6b4f6edc56ce56c235ae52a8abed3750769d7c3ecd68b6d75bc753225e1"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "d209438f51b9cca3f210c14dd4d6ce5f7b5d47ad0bb44ef61b84d10dd17c8bf21bd8231127c4242e4c931909574fc3cbb36dc1e249b14c728b8d31c70b4ef1a634c31322d252999c52594e993baf06"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "84f81c2569e605f81df2ac74922f3be37006a136a9d64de5d082fbfbaba11e122227398966326ec8a986d1000e6874635321cbf5d9ef36ce4bb7ac68ae3a6336a66a8f5c0478de71e257c9c7ace50d09368fda216826d08a1cb785d6e937d636649bd2b65420774d469b138fe025501ebef7e6afad533e205966085fec388162134065b16107dbe72d49741413c9915625e04cb01b96b18e40b3777a0310427cdff9992e1826fa0ae1ddf759a58cd4b1d97a7e8d59e35c5d365033dabb53db8d51ebe299b268ddf7e633065f8e7a2d43"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "b8aec481e2672b59e7d80ea03997b75cf5c7d4c772423f9298c73cd44efc094f2a5ef28c712877ffe9c5262b368c032551472b25e52eeb5f8870aea1dea8b6d624448729fbf78e71e0c906a42da681dd43cc4a68cceb9952f5b8d645da0eca07e8863c"}]}, 0x534}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "debde2f950f74da1", "bfd0d984772b23f6ceacc62a620d38cf", "fe2a6ee3", "e40fb5cff07dd43e"}, 0x28) r2 = syz_io_uring_setup(0x5c31, &(0x7f0000000140)={0x0, 0xf88b, 0x20, 0x2, 0x248, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000480)) r3 = io_uring_setup(0x6585, &(0x7f0000000240)={0x0, 0x9576, 0x8, 0x2, 0x30f, 0x0, r1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000300)=[r4, r5, r6, r2]}, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 17:33:13 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x3000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="340100001200000125bd7000fbdbdf250500f9c14e204e22000000000600000003000000fc090000ffff00003f00000006000000300c0000", @ANYRES32=r2, @ANYBLOB="42000000030000000500000008000000d50001000c0bc2ac606f881c8a7ba10c4ac348e00625698bf3140d4c7348885557dea7ab14eea88fc3680757a094c2e978c25f4c96f655ad5e8d67cd09f29f16491971856697e97899f1f9fbe39cd56249cd1e8c140514c3be992d96bdfd73584e8207a62475930252360173f01f0a8ec0404fccc06ac0ff216424d94c12ce835fbbd805a3271a99ddbc5b8beca78a378b5b9643444284370c6501f1cd33218ce5a308cd03c59afb61695641fd98a274be374cecdd7899a96a7ee2174219525541bbd0b81630ddce1344188d08e042d8e925b50000000e00010095561d56e1ba32af6e9900000000"], 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x40440c0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x3000) 17:33:13 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000100)={'\x00', 0x1, 0x1, 0xa4}) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x900000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x0, 0x4, 0x70bd2a, 0x25dfdbde, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x35, 0x7, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x5) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x300, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x2, 0xe98, 0x1, 'queue0\x00', 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x28}}, 0x4048801) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000380)={0xd4, 0x8, 0xbcc, {0x7fffffff, 0x2}, 0x3682a71d, 0xb0}) 17:33:13 executing program 3: r0 = syz_io_uring_setup(0x7187, &(0x7f0000000080)={0x0, 0x82e5, 0x4, 0x3, 0x2ac}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r0, 0x8000000) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:13 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080), 0x4) 17:33:13 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24004000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x10010, r1, 0x0) 17:33:13 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:13 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 17:33:13 executing program 3: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x40000000, &(0x7f0000001200)={0xa, 0x4e24, 0xfff, @mcast2, 0x8001}, 0x1c) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)=""/238, &(0x7f00000001c0)=0xee) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) io_uring_setup(0x69c1, &(0x7f0000000040)={0x0, 0x5ea8, 0x10, 0x2, 0x264}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001300)={{0xa, 0x4e23, 0x0, @empty, 0x1}, {0xa, 0x4e20, 0x7, @private1, 0x2}, 0x0, [0x80000000, 0x5, 0x7, 0x1003, 0x2, 0x8, 0x7, 0xff]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001240), 0x4) 17:33:13 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xa00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:13 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x2}, @sack_perm, @mss={0x2, 0x8}], 0x3) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:13 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20040004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x1, 0x800, 0x1, &(0x7f0000000200)={0xffffffffffffffff}) shmget(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xb00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:14 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) pidfd_open(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x51b2, &(0x7f0000000040)={0x0, 0x6dc5, 0x4, 0x3, 0x20, 0x0, r0}, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, r0, r0, r2], 0x4) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000180)={@mcast2}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) r2 = accept$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xc00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000f81000/0x3000)=nil, 0x3000, 0x300000c, 0x30, 0xffffffffffffffff, 0x8000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r0) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xd00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 5: r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r2, 0x7) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9408000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45001}, 0x41000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000180)) shmdt(r1) 17:33:14 executing program 3: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xfffffffffffffffd) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x1, 0x1, 0x8d, 0x0, 0x9, 0xa3015, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000000), 0x9}, 0x434, 0xff, 0x80, 0x1, 0xff, 0x8001, 0x8, 0x0, 0xcef, 0x0, 0x5}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2, 0x11, r0, 0x10000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 17:33:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xc, 0x0, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 17:33:14 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xe00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) shmget(0x2, 0x3000, 0x180, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000180)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25) syz_io_uring_setup(0xae, &(0x7f0000000040)={0x0, 0x7cbe, 0x10, 0x2, 0x234, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x16, 0x7a, 0x21, 0x0, 0x5, 0x102, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x1, 0x20, 0x4, 0x9, 0x1, 0x6, 0x0, 0x8, 0x0, 0x800}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) socket(0x31, 0xa, 0x7) 17:33:14 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) socketpair(0x18, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x1, 0x7, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8, 0x700, 0x2, 0xffff}}) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0xf00000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 17:33:14 executing program 3: shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1000000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x6, 0x2}, {0xc3, 0x3}, 0xfff, 0x2, 0x9}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1af8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x91, 0x80}, 'port1\x00', 0x20, 0x0, 0x8, 0x7fff, 0x8001, 0x3f, 0x3, 0x0, 0x7, 0x40}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x9e, 0x4}, 'port0\x00', 0x59, 0xa0020, 0x2, 0x7, 0x0, 0x5, 0xba4c, 0x0, 0x0, 0x20}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r1, 0x0) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) socketpair(0x1d, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3f, 0x7, 0x9, 0x0, 0x7, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc45, 0x2, @perf_config_ext={0xcd, 0x81}, 0x1082, 0xff, 0x4, 0x0, 0x4, 0x1, 0x1, 0x0, 0x9, 0x0, 0x40}, r0, 0x1, r0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x60100) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r1, r3, r4, r0, r1, r0, r5, r0], 0x8) 17:33:14 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}]}, 0x20}, 0x1, 0x0, 0x0, 0x48044}, 0x40030) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x33}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4004004) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x24}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:14 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x80, 0x2, 0x4, 0x0, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x0, 0x3}}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) read$ptp(r1, &(0x7f0000000000)=""/41, 0x29) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1100000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r1 = io_uring_setup(0x7a63, &(0x7f00000000c0)={0x0, 0x22c9, 0x23, 0x3, 0x24e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0x8000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:semanage_exec_t:s0\x00', 0x25) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r5 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x5000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x803, 0x101003) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r2, 0x2) shmdt(r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000380)={0xd}) shmdt(r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:14 executing program 2: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:14 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1200000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x4e711) 17:33:14 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 0: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x3, 0x9, 0xc, 0x5, "a1fa70e2f97a65ae3264c76de84728d1f582d75bd49642a2d2eef3768c3ebe6e3c2f5c1d3c122bd089a26da0e3fcae724df162dbcb1ab97bbd831982edf99dd5", "a7b8f9edbe6cc15289b97508043270325c4b09c54f758b421fe49236670090c0", [0x7fff, 0x6]}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:14 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x26, 0x5, 0x1000) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x1e, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "7a895636351eebed2f5c1735c83f"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "a1c3cc4474190f6d9821b39c44772b78644a756fae0dcbd7282f66c2d4a0b5ea8858e361c38ffeb954d800dc66aca7f0eb45045ef5e1203b4196506dd8416da1dd7750429bd39ba103af5fc7e02625d88a742fb3cf64119bb1cf4854e655f580b8a6accc5c534a4f94821a4bdd2bc509d34653174df24c21ac804642"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004090}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:14 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x4, 0x4) 17:33:14 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x1300000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:14 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:14 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:14 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@private2, 0x1d}) 17:33:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x2, 0x4000, 0x780018c1, &(0x7f0000ffb000/0x4000)=nil) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x12, 0xffffffffffffffff, 0x7) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000140)=""/81, 0x51) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x400302, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000240)={&(0x7f0000000200), &(0x7f0000000580)=""/4096, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xc2001, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r3, 0x1) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x3201000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:15 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x30, r0, 0x8000000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x6, {{0xa, 0x4e23, 0x400, @local, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x0, @private2, 0x5}}, {{0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x44}, 0xb4a8}}, {{0xa, 0x4e20, 0x1f, @empty, 0x8001}}]}, 0x210) 17:33:15 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x7fff, 0x0, {0x1, 0x3, 0x4, 0x2, 0x3}, 0x5}) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x8}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 0: perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x2, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x59, 0x1, 0xfb, 0x0, 0x662, 0x80254, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x8}, 0x0, 0x7, 0xf5, 0x4, 0x200, 0x9, 0x9, 0x0, 0x9, 0x0, 0x800}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="8e2a495ac93b68d991238ed40b0a676a", 0x10) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x2c, 0xa, 0x0, &(0x7f0000000040)) 17:33:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r1, 0x10000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) r2 = syz_io_uring_setup(0x4865, &(0x7f0000000240)={0x0, 0xf8d9, 0x0, 0x2, 0x27e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000440), 0x1) 17:33:15 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8011) 17:33:15 executing program 5: r0 = shmget(0x1, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000)=r2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0x4010, r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x800, 0x1}) 17:33:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x1, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000140)={0x0, 0x4f03, 0x0, 0x0, 0x1cf}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) shmget(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) syz_io_uring_setup(0x8001d0d, &(0x7f00000001c0)={0x0, 0x13c6, 0x4, 0x0, 0x34d, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) 17:33:15 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x30, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 17:33:15 executing program 3: ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:15 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x5, 0x6}, {0x3, 0x2}, 0xd5, 0x2, 0x4}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x33b4, &(0x7f0000000040)={0x0, 0x7f37, 0x2, 0x2, 0xb5, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x100000a, 0x11, r1, 0x10000000) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 3: ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x481102, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) socket(0x23, 0xa, 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) socketpair(0x2, 0x3, 0x1000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25030000000c00050001000000000000000c000400020000000000000008000100000000004c00078008000100", @ANYBLOB="f4308d592f02594fd0d58ac3e3dee669ce42452cd7d612beb1f6f173ebccdea72848aaf744a917380ab91aed869f51026e3c584d9a1bd203513020ec7e90890c064e97cd2417b8e792de841b5dca47b269ea978a30551873f0430a9639f5fd6ae9a7cde48404d56de479723a17bff6c9e2f107156974adda2463964bf15197cec957086f4800738ad08724195703323cf242e001638ba26184bc8dbc9edde37f32b0038f5778a0910dd4aa4896e844211a11e507e36ac819345545a5073c5b85c2b07bacb51be8341d9fcc818d423ba6990d8d6538906ec4", @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000010", @ANYRESDEC, @ANYBLOB="08000100", @ANYRES32, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8c2) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x7) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x28c01) r2 = syz_io_uring_setup(0x5c1f, &(0x7f0000000280)={0x0, 0x5f44, 0x4, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000440)) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000000100)={&(0x7f0000000040)="dcfe861c3d8908b925e28e27387af9dfe875ff23858331cbbb20ded9646051be5b9451413c413fc35809dab6cc5874bfb563c407937f3781c7b330aeca2d4deba2758bc2bed9df53b51d403453441dbe1b7fa9777f92829e338729cd6d862305a4db1b1ab3af545196cf7ed12797315bb64ca3b7cd20a3d624e59b54a90e5f33d254f3570587", 0x86}) 17:33:15 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 17:33:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}]}, 0x2c}}, 0x4000801) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x10, r2, 0x10000000) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 3091.974676][T32248] ================================================================== [ 3091.982780][T32248] BUG: KCSAN: data-race in ext4_mark_iloc_dirty / find_inode_bit [ 3091.990504][T32248] [ 3091.992816][T32248] write to 0xffff8881261dda14 of 4 bytes by task 32250 on cpu 0: [ 3092.000521][T32248] ext4_mark_iloc_dirty+0x888/0x1700 [ 3092.005803][T32248] ext4_xattr_set_handle+0xf77/0x1120 [ 3092.011179][T32248] ext4_initxattrs+0x66/0xb0 [ 3092.015769][T32248] security_inode_init_security+0x1a9/0x260 17:33:15 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x800) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:15 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x0, 0x2, 0x8, 0x0, 0x800, 0x40020, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xae1, 0x4, @perf_config_ext={0xd5, 0x3f}, 0x0, 0x6, 0x80000000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7, 0x2010, r0, 0x100000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) [ 3092.021664][T32248] ext4_init_security+0x30/0x40 [ 3092.026513][T32248] __ext4_new_inode+0x2a0a/0x2fd0 [ 3092.031530][T32248] ext4_symlink+0x2cc/0x700 [ 3092.036025][T32248] vfs_symlink+0x23f/0x350 [ 3092.040429][T32248] do_symlinkat+0x104/0x380 [ 3092.044929][T32248] __x64_sys_symlink+0x52/0x60 [ 3092.049679][T32248] do_syscall_64+0x44/0xa0 [ 3092.054093][T32248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.059987][T32248] [ 3092.062301][T32248] read to 0xffff8881261dda14 of 4 bytes by task 32248 on cpu 1: [ 3092.069921][T32248] find_inode_bit+0x1ef/0x330 [ 3092.074593][T32248] __ext4_new_inode+0xc9a/0x2fd0 [ 3092.079520][T32248] ext4_symlink+0x2cc/0x700 [ 3092.084016][T32248] vfs_symlink+0x23f/0x350 [ 3092.088418][T32248] do_symlinkat+0x104/0x380 [ 3092.092910][T32248] __x64_sys_symlink+0x52/0x60 [ 3092.097660][T32248] do_syscall_64+0x44/0xa0 [ 3092.102128][T32248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.108025][T32248] [ 3092.110343][T32248] value changed: 0x615351db -> 0x00000000 [ 3092.116049][T32248] [ 3092.118357][T32248] Reported by Kernel Concurrency Sanitizer on: 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x4, 0x7, 0x0, 'queue0\x00', 0xffffffaf}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x4, 0x7, 0x37}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = io_uring_setup(0x1154, &(0x7f0000000240)={0x0, 0x35fc, 0x0, 0x2, 0x3b0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000002c0)=r2, 0x1) [ 3092.124491][T32248] CPU: 1 PID: 32248 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 3092.133278][T32248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3092.143332][T32248] ================================================================== 17:33:15 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0, r1], 0x2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r2, 0x10000000) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)={0x348, 0x12, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x40, 0x9, 0x6, {0x4e24, 0x4e23, [0x8, 0x8000, 0x3f, 0x2], [0x0, 0xffffffff, 0x40, 0x8], 0x0, [0x8d6, 0xffff]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "edea50dd9f2213bc6163e7a662f83b6557f1ee9563eb0e8943035d9287f5fe7524a975cdd20fb67e5d9a4409287a5dc627ca89bd0906fe2026a357495086963aff5e07edf3b5118e9834349ec1b96491fc2a1b8858a5064c05f90cfe415b9225d372a106b3ee1bdcc1ff32a554d693c4f37b0e989a09aadb5978dcdbdb86f403f46696b5482e17e2d21deca59e548dc13fb649f429a9de7caaa5e7d82ef5dfc75fe2c042cabe876905df587d1f4a0b6d025375ae83d1d6f855cacabcd3"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "0d5fc1d8cfcf5778ef7f8791ddedb61fd01a2151d6220f7b9c3fb4d78f286403ff2fafb6926f286a3b0cedc7007fe386671b052bb526ed9909cd2f7acbf8cf34c7"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "c47b95f27af4fef779a88841b993ad7b46f658810ded19b6e39028a9f629e86cd7d385114e8001ba984fa7c071cc1df3d6c5789db28436ced62f9f39ca177a6a0dc00cde33012c8641fd7fd9b194ced82c025f573b881956d1e9d6632fcf0eb1a27d5cbb4619ba13b9e1e6f43242bd980a0d7eac9b2900030a08769f2ea3a7611433a2907577176c53bdf06d34269703f41db1a06ecd2641812c0cfbe07cc59c78d0e1f5175153e681cc4b8f1f9b2708daeceb92665599fe6243e2e017a6daecebdcd104a64a6f500ac8e3be1749f38c029d77db4ba29f9675e084c2b405d9a7"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "84701a40141f519003e93575747dfcd118eeb7e696fb536353dd6f2092c61587ec4f6984a7f9ea5afc7b73d6aaf954c99a792aba0bb2a32efa7fe98b442786c4f5ef28e33e612db9a8c203a2487e0e1b6661ca049b816579b67d41f319d1c727db370ca66c4637"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "649b21eb7d63e01f929612f7b57f8ffb9abd937a08ec34d5e5ec72d36b4429735a306ac330e08cf19d738fdc02a23287db72c3f389c0140e74c05546feab65b939ca75d51f5a477201fccd5acca1b5d716326af842cadad11247e675d29aba2b731aebc4f5ed34ba676ce19a5aad2ec37e5759d1a797fd4d8cbb711fb6c8c662c5089bb1060652f7fba1e967df32a0f1049d8a59e88a9f89623e5f"}]}, 0x348}, 0x1, 0x0, 0x0, 0x49}, 0x4000000) 17:33:15 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x81}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf5ef}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:15 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:15 executing program 5: shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x345840, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x403) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0x4000010, 0xffffffffffffffff, 0x694) 17:33:15 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = syz_io_uring_setup(0x7e75, &(0x7f0000000240)={0x0, 0x8634, 0x0, 0x0, 0x349}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000400), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@gcm_128={{0x304}, "404e34086054c5e6", "4e445ec7b9225a8ccf2a0eb813616db0", "899d1ed2", "8e5fdd086cbc4794"}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x901004}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x362}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4048001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000500)='reno\x00', 0x5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[0xffffffffffffffff, r0, r2, r0, 0xffffffffffffffff, r3, r4, r6], 0x8) 17:33:16 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012bbd7000ffdbdf250600000008000700ac1414aa08000c00010000000500010000000000140088ea4d4ef0050787d8fd0600fe880000000000000000000000000101080007007f000001"], 0x48}, 0x1, 0x0, 0x0, 0x4804}, 0x4040800) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r1, 0x10000000) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)={'\x00', 0x7ff, 0x0, 0x1}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x488800, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x121400, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x5, 0x8, 0x7}) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200084}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004804) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x204000, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x40800) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x6d, {{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x2, @loopback}}, {{0xa, 0x4e24, 0x7fff, @mcast1, 0x80000001}}, {{0xa, 0x4e24, 0xd4, @empty, 0x6}}]}, 0x210) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) 17:33:16 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000007c0)={'raw\x00', 0x1000, "faa36def1fd937b90e57778e0e7101de1c4a01f6f9c41d225e47448c892ef4ed19b64bcc66d31cc342b6beb6a3277045e01977dde270a4b1d50ac3e46a1b779f894b6f9a0df5101eae36f967a6cbafff316408e89e6f17146ee209763d6bcdffbb26cdbbd9090bf5570f81846de2487e511e7c9346bcf3a2cb98179780e646996549b9331e7072d1ed7fb038d8a1471512bcd7351a8ae2a58e451c83ea65bbc57cd50d2156d097145a1dc320c861230b7e52705f0c952f1e1c431f1ca73b94289bfd3d56ba2949aba4266ef479ae3265c347a1716671b40e67bd1fec1fa87b6aec28a23023af6a7081d88815a3dd7638a01dee87c557ff0a836189d42001edfcb346b6a7d16385888c84170792bf2924b0e601173045860b8c11e0c371d1dc746d41f89c98978a82c142f7601f3b6d6c95429a065e38d963cdef9282da449ec0ad1ed34da4669c23d5c5389cb7a507b76dec8e85c7d236a37ff3b997465704eef29d360114bd0e2ea71a5189f195c6f813786b383155bd6e01c579f545baddb24eecb357823045e26b42e6c8e0c135e5ad1f6d774b3814a5872132eb628b786c153b64c746b1f036c99c522278d5044f5616eccc54d8a416a2419e3117b9a0ca42c402f54c50474b01692da14adabc043f167443f8c23d5916fafd52032a8e4244644f3683737a7aef5a2e924698a60ecb35c2722b65cf302c39fb1a565afbbc6bc2fbbe8aa6806711d51ce2d7ce4c2939fb11eb0e9d4276a02d601054a6ff1bd14fda33cdd23b830069255c4426bf14de87123b75b647c8989458bf772fa773c2deb7f1909b17b9b7f5487df9dd1f67ce6e4d58de8254955f3de6b13b5b25025adbdcad5fff8c45faf781c80848352138f3932fc632df6c75eca7dab7e683dfaf5e45d10b4e18ff25bf7c1c1cb5ffbecbc6c995c827e21aed2f2651e35861be301cba7a6d5b56c2dc8189d9b6118baad11d2303375dc55f19d313908e45d5bf7623d2c6d560cefc2524c60c136038f1e8bf5748b240f212e31801ae889074224df84a92b36b932bd9c732d5f34a40a0ff1c996ac1661809bf0bdd18f8025e23e4d8561842c37a2a4eef59c47c7a657a0fdb210854b9c59cab31f2c31d6bf6e8267651cc145848e69d0e22dabf870bc36273c140a582e1a2401f564505bf91ac3c80b835ebe026c8a120a9fb9ded674891b0667c498fa69b1b41ca687ee7dad2ad85161fbb630ae11976447870647fd6e85cf20df3e60b1957dbbaf39ae4bca26230902cc751b5a1ae6d4cc616255318224965a30ae5b1e6eeb7425761ba76addd9e146dfc644ab8e025cbdef6eb0fcfabbfa2824da4ffd5b69518d030baff7d47071f38c0458b6d7a6a5d0525543ee837e15b041c92ced0c29e190bc6f11287dd9b17da79f7225e54cae1e16fbd752141bb7095cac7101b4c0bb294606cb755dc63e3df1bb29de2a5122e56eefc52b439d1a5abf1e7d91d6ced21717e1d45a83e11d16e589c04c606d9d23c9eda7036ff9ab94a8e52b15fe09a6125044ec95027b2a944b420fcd0fd6fb29cddabce5de1fff2e49bbb1152019d3b005598aad30a8d6ff023c9f7b8713824a136cb1013cdbf7025bcfed9ab0e7a87991e707f5125c290bfe02f690c827c38fe1a59f99b2a756c06e20e194d35062cc4f5be9815f7da3bf53f219e69db36343c348021451b2af6f3ef50faaaf6c6d607391ced69aa886d0281d9e9facc375d211865dc3871db37e56b9fb10159214515eba834ed477cb367523592f3903ebb36c1c6afde4ea731e0015b12108d7b1bc539d07ca63efb35def1218aec9cd5e568a6ec16897300661a3de111b6b6b8a2bc9bc3bbc8d80c977a0bc0e3ff4232f935d1b60f2d68955a83ae4baee8df07875bcd13fdbd2e492d6db5227d8a26136f557044efc96cc01c6aaacd29bcdcdb87aa9e3bceb235381835a716e55f425b61b77bbb12baaf2c95c4aae965a2e964fc410d2cb4368a1e8b857d04e577ba315546212a33e2c5e6033542c1d2aa2cd8c13dbdab06351be2ab58e608d7ba6edf02c9b25d072ac65d578485e5bdbaaaa59eb3230f53cfcb3249b256fa3214203b3f476bb8f2d5c69c9560e88df340d6872bf706d5083e690107ff362041606ea6e85c3a3ec15737ad20bd4c041b81abd3951cf138738d7c62152d454c13f335595911b049a02766e17d8382f1f74082b5a51623a6695d919238265fc84e8b2114bec811daacf2aa3310b30dda90a59e5b3ec026e43dedc9806fd37bd1a903b2c1e9f71942353f789fdef835c53dca96d9a8d0c1279acb2c50a0371c47b0cfce0b3176a6f0ef0884dbe3091c8134514c64ccdfd5c06350cc809aee60afb06b7cbca09a1c7d62b4d0436819d82e63c6111b565995eb7b5a946e2bb7563e92cf19de759fe88c08e8350ec64713f75bd958a9e058615c3112b7364e7b4d7c9e2ff2ce47d57f3323208f3b5705b030a5408ea8d45db7eb0a1898565c768f519975bc0e854551ff7132b4d607e90e506e76679a6ade1bd353b83172a35fdeeb6df7b7df0fca9d137d8fb77356057e3ff609ba0c61922d9db34aafd3e4ff5d6bebc378dfd7be7cffdedb39c878a3c611c9a8ad6629a97146c7f36f5d9a63e8a0cd20e45992ff86d6c28b94fb60712f8de1377fce8623c895e9743bae7dd019bfb2daa07c414ebcd8b00dcb936ade192dfe668871c8cd3962b9c7151b55efcaff80768346999e95e4eecbe6260348390f988f7303176dae193a91fdfeb11e3c56b88ad98171c69e84b4e81bb0d9d58480fb6eaaa18914dab73f3e204d436e5ef8569e34b9615b137417e03e4dfaf964b31f8793ee105402346aad3f1ac1d40a95a75f72e4eef688eacecffe9c8b9e3761fcc54e7e4b43f057358c15602eeef2e50bdc5669641c3c22fe1a1588f628459ca5189c569232daf0e248c20026acffb0531744f953cd4b207379e64534cd8d50acc14ba3d7dd94843e48dd40c8afc40871384e95c364e7329dfea18f1ae767042178f37a768338fa633feeaa28a5bd42811791d8df376c68bc5056b932ffc110003490459265f4263642a004b9caa768b91f7a463ad9a7e55564fb25cf63c95aa51ed2c206bf82d3d1b74b56fa7e1ae3134a515cfa30b0e359b331dcf6e6e379204f63815133ee3850e038bce8f51d3550ca7adb172f05cac0c31904575fef9249a3020198361b77c5e360d83b5ba8141f9b4333892dd164e83bf1a83499036d5bb87bc83d84e10345623e2953e2dcca3115a4c41d34cff9406a9bdba741e54ebe638636c2c6796d34b550640444a4e3cb98e6e32c1266fd1172841906d6dca5f1e2bf19570ab856380ccf42bbc41e27c669d0d0e828dd05b7f31ee42ad6ff337ed8d3b974de373bebcf7144eef9d2d5fbd95803441496b58a1ab344afa6e4b44c3b23f26b0dd51fb26c233ab88f6badd4791467040e65d3016f0b18a880db70106686a3f0ab206fd9c4c19689b703977b897864c18d96455f66b2acc7290cfb1b9218d780c2c59a579462aeac0fa59654c0cba5d00e0b9f461b73a29a02231b9bd83b42a85192bf92d5de6ff4215f7009cde99b9f2e1a0942ac096421756a41a4929e5ba138470cf6e539a2c671efbcf8353aec8fdc0895eb611317ffd862d839dbb62dd8f8ec0e3860b8de4a06393cecf31ce891d53b904d72034a5d68f8c36b5e87f7382e46d0aa518d45ed106c840463c6ae0fdff5872536a85be1f3251bed14e71b13d9801291cc534dd31dbb0a0fd44237d5b00135550058686c349677ed9830eb351e0479fe4c1bd9f1ae5738cc913476bfb72d489899b1580746df176f1f1cec459893a41cdeb0d3c76c884ca95ffc4a08d8ddbe6d7a53dc7df0bb25106f04efe8fa88f9844e10db51856c8d12ac6bf80fec2b82eaad4d94ae6e20a6cbe4065d0ac53442e1e6202d6c416add3b161f751c5036e7238dfaadd3bd7c048fdb8ff05b2202ecc18e0204e23b597d8bf5ef998c521ba0bf27c12f88aaea0f0b5bb78c1f7d155876241dfc0d1d0db3a2b3b7ce5ddec2acd151650f3d3a9983e0eff4b51fac4c0073ae4b3ea6067c175faf92112509932e0b9bf9c1dff07ec83d802b0432f1e33aea6360fc3dbebd573091d90550e3d3c07d2da7fb8eb96c7a6e960b04fd4e1d35eba5655cac10176110d47b5cfd9c1c16eb826522b0ce53481a8bab8b81780d655568dc6d1c266da5803fef0514229d4a973bc3dba9c69f07257c1870283f13c88ddfbe42d64fc6b7fe687248037faf12143893bf82363ab9c9359fd605e40cddee0ee80623191bf41fdf4b0a6c709936b1ecfec8ae48b27a44c2ba0f213cbf10abe5248365d655f78e0840517ef1686152743bca2def377410a4cd705c51ec733421d66e3f2e403ed0d600879a2b1c5b74eac6b8ff3138a98bddf5601fef9d5481b0c159309daaa251c98a94e43ab68fad7d126db4114721aafd0a34496c158913453dc033ceac76fe776cbae03b87ce9cfe7b5fd5a096f732e7bfb2fd3cf10b21350bf202c8f6596e8b7f9cda38df6ba8eef0c2c4a4d483c097cbb48a436dc66778c853331d5258abe13abb6b77ff329cfdc3bd6042415bba675a03de95352f16eb8896f865d1afdc67b3ed20297569c9e5472b766cc7b34f2e53a86707f8ae5f3011846dd96e064afeac5f8d332da577a066ef4c02318a143ccb90a2ff14b51462bfc53437945bd9400cc2e8fefa2d8bffc1a17421fc656792f7284b06ebedaf624f8c50997d49217b9ddc5c87d4d72182b584dc5fd40b23d6340b4dcf6dfd41941833fa690e74bfab5311b056d7c1e27c5e9417ada13a7ee1bae5b7e626771eaf81f5a90d8ed31699979686640dd5b1d574c66a1ddeb8d2b5038c37f694fef2b9fa887ce35338aaeab51d90bfe8c35d8745492c9b4cd64862409e4926395219f42d97c841bc333253a8f0bd1d717862603aa744b2e690d8d7e56cac4eb2e996fcfa007b1e9972ed936dabe6b256b35cbee6165065df4046e76bb13c3e5f610f2f42f33c8ecdd887cb8b5045831de431c553c252c1218992f5892ed79b98820d530e8316baa8b1c90441e0b3404aabf0d83d698cd43fbad8f1b13402fbc7880c4a4297f13ad8faced9dbfaa7fb1900254221d2c38a52467fc152a3c06965c3e50a88d99ef753f4eb6ee0a17be6051fe9405dc77cace4523679bb744e706682a60600c46b6ca43042be3238d71f4778eb597aaee4e0819f78e40af3e872d841f68743b3f4ab5cae8fd23d9eb7545108e8b971fabab58ddf169f4ad50d2e1469741ee176e6d73d9da0d3f724d8ffb6e6cf2c61e1a8106366313d87f15dd3a785bda0206d76f129e4074592c6a8331d4ee7125cd0a11215cc59ac466ae7d8bd78e968b0e8df46be4dcbc58445ea1caa075000f1069811128e6f527f1694b24a855df91886dfa51acd6accb0f5a5d7cd3580d0106fc55715631924072076e96f6096786f36ce5e841b218bdfd25e7865916e5375b903b9ee272921824302a0a9783137c78fab31919d442c20dfd6ed0edc644cfad5dccf826730b6ff83a08f9b1a81a90692ff1108bd93423ca373499df28268a774e567d20cc33ae67e3fc20df7da3be6ca48612aa31a15c1667bbd4afac4ac0c1f12c8b77f85c3de8a6e2551939d01ed6c63c92a4c8a6ab1fb2be4eff6e6d3b3f8238811bc7e5ab9af0afe76d59651210aee37e37a00c9d40d566aa8585b32668b8b55aafb990bd2cabc3c310f07e29bd9b3f44ac0b70fcad62ad09c1a002eb1dc842b1c07b00b64cd6c236ec4fb7d"}, &(0x7f0000000100)=0x1024) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x9, 0x1000, 0xfffffff9, 0x7}, 0x14) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x3, 0xa, 0x5, &(0x7f0000000080)) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmat(0x0, &(0x7f0000ff6000/0xa000)=nil, 0x3000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x9, 0x4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) 17:33:16 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:16 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000ac0)=[@sack_perm, @sack_perm], 0x2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440), 0xc, &(0x7f0000000680)={&(0x7f0000000d40)=ANY=[@ANYBLOB="12020000e5e9716ba9ebe781c020a73185e04b8c79655cb87233c98d61a86d1648cdf5fa4fdba29f1c2c2221cae7f722598400b1fb7e87010e9194b6dd4487da", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf251e000000c80024800c0002000203aaaaaaaaaaaaac000380500003800c0004000202aaaaaaaaaaaa060001000200000006000300000000000c000400000000000000000006000100ffff000006000100000000000c0004000202aaaaaaaaaaaa080002000300000005000200030000000c00050005000000000000000c0005000004000000000000240003800c0004000203aaaaaaaaaaaa08000200020000000c000400000000000000000008000100030000000c00038006000300a2aa00000c0002000201aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="140124800c0002000202aaaaaaaaaaaa080001000700000008000100010100000c00020000000000000000000800010007000000240003800800010002000000180003800c0004000201aaaaaaaaaaaa06000100ffff000008000100040000003c000380080004000300000008000400010400000800010000000000180003800c0004000203aaaaaaaaaaaa06000300000000000800010003000000780003800c00050005000000000000000800040027cb0000080001000300000005000200030000000c0005000200000000000000080001000100000008000400010400000c000500000200000000000008000400080000002000038008000200020000000c0004000201aaaaaaaaaaaa06000300ffff0000"], 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0x200088d1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x208400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6gre0\x00', r3, 0x2f, 0x0, 0x3, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x0, 0x7, 0xfffffffc, 0x7ff}}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1cc, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46bad12f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e32ed0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x114e6a73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57605a12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x570c7294}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76a0743b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e30fc88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e16a4a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x83a7e31}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf6317d4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c5ffeb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d7c0fef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d6b9f10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541d8d98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbe1766}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x257506d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c76a98c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x551ac7b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38ca9dd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27e9075}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67700e89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30a44125}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x2040810}, 0x4040000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x60000}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x200040d0) 17:33:16 executing program 2: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)={'\x00', 0x1ff, 0x1, 0x5}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) 17:33:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x1, 0x1000, 0x200, {0x3ff, 0x6}, 0x6ba655e3, 0x80000000}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c, 0x80000) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x9, 0x1, 0xff, 0x0, 0x9, 0xff}, 0x20) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000080)={'\x00', 0x4, 0x2}) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000240)={0x0, 0xdf8c, 0x0, 0x0, 0x800000}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2], 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 17:33:16 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x13) r1 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) shmdt(r1) 17:33:16 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7840, &(0x7f0000000080)={0x0, 0x68e9, 0x10, 0x1, 0x171, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0x10000000) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x5088, &(0x7f0000000240)={0x0, 0x6d, 0x2, 0x0, 0x3cf, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000440)) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x401, 0x20000) ioctl$LOOP_CLR_FD(r2, 0x4c01) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x84080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x3, 0x400, 0xfffffffc}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000900)={{0x81}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000100)={0x80000001, 0x0, 0x8, {0x1, 0x149}, 0xc13, 0x7}) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x2, 0x4, 0x0, 0x322}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x7ff, 0x3, 0x400}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000b, 0x30, r0, 0x10000000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x4}, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x101}, 0x2, [0x40, 0x6, 0x7, 0x1f08bd5f, 0x3db2, 0x7, 0x7e337a2, 0x8000]}, 0x5c) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x5) 17:33:16 executing program 3: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="241200001300000427bd7000ffdbdf252a0400064e204e2304000000030000008100000089a900000300000000000080a07c000068040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1224}, 0x1, 0x0, 0x0, 0x40000}, 0x11) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_setup(0x14a2, &(0x7f0000000240)={0x0, 0x51dc, 0x4, 0x2, 0xe5, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:16 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r1 = io_uring_setup(0x7a63, &(0x7f00000000c0)={0x0, 0x22c9, 0x23, 0x3, 0x24e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0x8000000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:semanage_exec_t:s0\x00', 0x25) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r5 = shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x5000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x803, 0x101003) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r2, 0x2) shmdt(r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000380)={0xd}) shmdt(r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0xa, 0x3, &(0x7f0000000000)) shmget(0x2, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) r0 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmget(0x1, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmdt(r1) shmdt(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) read$usbmon(r2, &(0x7f0000000040)=""/4096, 0x1000) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x18040, 0x0) syz_io_uring_setup(0x7870, &(0x7f0000000280)={0x0, 0xeb20, 0x0, 0x2, 0xc7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x7000)=nil, &(0x7f0000000300), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmdt(r0) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000000), 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x9, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0xfff9, [0x2, 0xffffaf0f, 0x0, 0x7, 0x2, 0x0, 0xe0, 0x8]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e23, 0x0, @local, 0x5}, {0xa, 0x4e23, 0x2, @private2, 0x2}, 0x7, [0x5, 0x71, 0xfff, 0x5, 0x80000000, 0xb7f, 0x7e0]}, 0x5c) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:16 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000140)=""/120, 0x78}], 0x5) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) 17:33:16 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x25, 0x80000, 0x1, &(0x7f0000000000)) 17:33:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = io_uring_setup(0x214e, &(0x7f0000000240)={0x0, 0x5e6, 0x2, 0x3, 0x355, 0x0, r0}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:16 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:16 executing program 5: wait4(0x0, &(0x7f0000000000), 0x20000000, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r1 = syz_io_uring_setup(0x2cc7, &(0x7f0000000040)={0x0, 0xfadb, 0x8, 0x3, 0x1fd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r2 = syz_io_uring_setup(0x35de, &(0x7f0000000140)={0x0, 0xb220, 0x0, 0x0, 0x294, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r2, 0x10000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x10010, r1, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000006", @ANYRES16=r4, @ANYBLOB="08002abd7000ffdbdf250600000005000100010000001400020000000000000000000000ffff64010100050001000000000005000100000000001400060076657468305f746f5f6261746164760008000500ac1414432a00070073797374656d5f753a6f626a6563745f723a746d707265617065725f657865635f2fc285afa6dde1743a7330000000080005007f000001ca39e29da9da677f1d86ee8f72fdb657205ec6b27b4df3069fe7a170d569a1b57345bbe8559f3941f9d960926c97e69f7a40b1fe50615a41ba3e4630e7cabd7f6a"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x2010, r2, 0x8000000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:17 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x337a, &(0x7f0000000080)={0x0, 0xbb99, 0x8, 0x1, 0x3cb, 0x0, r0}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x3d5d, &(0x7f0000000340)={0x0, 0x0, 0x28, 0x3, 0xc4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x10010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:17 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x5000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000240)=r1, 0x1) 17:33:17 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 5: r0 = fork() wait4(r0, 0x0, 0x80000000, 0x0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket(0x4, 0x5, 0x5) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 4: syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x1f, 0x6, 0x0, 0x5, 0x0, 0x36, 0x224, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xfff}, 0x2, 0xda84, 0xfffffffa, 0x4, 0xfde, 0xb1f, 0x7ff, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, r0, 0xb7a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x20010, 0xffffffffffffffff, 0x10000000) 17:33:17 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0xfffffffc, 0x9e097b317e7d7310}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = socket(0x22, 0x6, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x5, 0x8001, 0x16, @local, @mcast2, 0x1, 0x58, 0x8, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="67726501000080004047dcab8813ae36", @ANYRES32=r2, @ANYBLOB="0010000800000008000009a34620001800680000072f9078e00000010a01010201000000"]}) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0x4fd, 0x24, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8, 0x45}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x24, r1}) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x4, 0x80802, 0x20000000, &(0x7f0000000040)) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000900)={{0x81}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x7ff, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000001c0)={0x4, 0x9, 0x401, {0x2, 0x1}, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x20, 0x0, 0x101}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280)) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x2601, &(0x7f0000000240)={0x0, 0xef1a, 0x1, 0x0, 0x3}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000440)=""/102400, 0x19000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x5) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmdt(r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x424400, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x80000001, 0x0, 0x4, 0x2, 0x8, "5db23b29f61a6e13cdbb8c0aa02e8d98061fb6e4b814ae76d83894e075b15eb96d8e760fe5d7f7c26d3803b794cb28c43df258d68604d8a761ce76f1206dd986", "e6414c9cd9163307563cb248efaa8e2f408e63a6dc6bdf6aa4d39cc236c8d783f8a912dda0c66e0597964a1470e7ac64f1a2042ae5e436fa1f47486920027350", "eb1fc297ce5dce350c50d7e13ef68808c132e73e793bd28942ddb970020f90aa", [0x6, 0x3]}) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x99c6, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 5: shmget(0x0, 0x1000, 0x8, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget(0x1, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x4572, &(0x7f0000000200)={0x0, 0x568e, 0x4, 0x3, 0x18f, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)=""/243, &(0x7f0000000000)=0xf3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000180)) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x5a6b, &(0x7f0000000440)={0x0, 0xcacc, 0x26, 0x2, 0x243, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x93eeb81a427a1816) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x800) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x31, 0x4, 0x0, {0x5, 0x803}, 0xd3, 0x7}) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="581100001200040729bd7000fcdbdf250104003f4e204e240180000008000000020000000100000074000000ff0f00000700000020000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1158}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 17:33:17 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x13a, 0x2, {0x2, 0x3, 0x1f, 0x3, 0x8}, 0x6}) r1 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x58397) syz_io_uring_setup(0x7cc9, &(0x7f0000000100)={0x0, 0x11fd, 0x8, 0x3, 0x153, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) shmdt(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0xb0}) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000240)={@local}, &(0x7f0000000280)=0x14) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x3, 0x70}, {0x1, 0x4}, 0xc83, 0x4, 0x9}) 17:33:17 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x810, 0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 17:33:17 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:17 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x7) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x3fc, 0x15, 0x100, 0x70bd2c, 0x25dfdbff, {0x2b, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x48, 0x1, "0c7447294780fd24079f60e5bfea74d3eee7207b64f48b8347be7eab6ee73f60f5f9f1a4d052bf265b705df525654b9889711a8300280cf71d8c57b0db9d0394a483ec9a"}, @INET_DIAG_REQ_BYTECODE={0x11e, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "e580c31c5e74b51e0e913355915de0bef4b4a1535977288b059df08f5ca18bca8907e47083b2fb2b79994e3de5ba80f5365f73dd2154a821f41a366e3561df3b13865f53b606805bdac3bb88aa57b44ea29ab430147073f78c529fdfd947d00400606e620e01c8ab4aa14dc6604a1d6c173edb3fef0b0672123cabb77be0b66ce9978bf01e833b1eccef19a29db35f713b2be625380a381c86a1e1cfe9e992b2d1d434"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "fec4a2373cf6790031ae184c3201af3d179926711df491c84750b1c9e75d31a1ae8c7acacbe3b8f4fc3091a6903b311516f16c023d1ec48a6fde48b337f63612f702e05a3af571f889b91ddf297afaaf288a595bdd98bc25d2c5d71f9cd3ea2292bb3c233910cfa5e9c97e045a9c89412bec3a94d34e13c5567ca3deb17c8e2acb4081716e9279e2a952d76c653062831562979d15c7c412a3e61d921937daeac48bae26a3aa35d310b653964461edb47862eefc706922de6c0a20cbbb9ea4a4ed18776480f6aa1b61ea34140d816b82b6783f869249a84352ef6bf06d656053ae9f130a11601861"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "bdbe7250d2fd303401e3ae04a30104000000000000002594d1ca192981d80b88ab8ce90745"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "26df1c13e46b36d4b2829d"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "e05561db7f015ca59bb8473bd9e8e6495029cd1c1b15817b61eb472731f175484ae6b4472ba1eef09960f97e7ff8d5aad29f0e2856e944f0fece2390d5e2df6a74815fe9c34beb393ff32da8b1b13943bb60aadf4b87d885782bc4c5fc351ec72f86fb459ad61898db4b2cc24e16b7b1568e611a27a8c85e86b8fc34fca009a56a3342d427e7c774182ab9d886512430d386b68adc8b48990c35b81f2ec05c837393a5b9838841c14bfb24"}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20008801}, 0x8084) 17:33:17 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 17:33:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) 17:33:17 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x3, 0x3f}, 'port1\x00', 0x22, 0x120008, 0x2, 0x2, 0xf53, 0x9d5, 0x9, 0x0, 0x1, 0x3}) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:17 executing program 2: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180), 0x900000000000000}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:17 executing program 0: r0 = shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmdt(r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = getpgrp(0x0) getpriority(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000) shmget(0x2, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) 17:33:18 executing program 1: r0 = io_uring_setup(0x79a2, &(0x7f0000000240)={0x0, 0x742c, 0x0, 0x2, 0x178}) r1 = socket(0x1f, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = syz_io_uring_setup(0x71b2, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x5, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r3 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x10, 0x8, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) io_uring_setup(0x49b2, &(0x7f0000000340)={0x0, 0xab52, 0x1, 0x2, 0x32c, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) r1 = syz_io_uring_setup(0x800871af, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x23f4, &(0x7f0000000080)={0x0, 0xcc09, 0x1, 0x0, 0x3c9, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x60c, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2c5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = syz_io_uring_setup(0x55ed, &(0x7f0000000440)={0x0, 0x3527, 0x2, 0x2, 0x178, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000540), 0x1) syz_io_uring_setup(0x7596, &(0x7f0000000240)={0x0, 0xa2f9, 0x0, 0x1, 0xdb}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x3cd9, &(0x7f0000000040)={0x0, 0x6d3c, 0x10, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x110, r4, 0x8000000) 17:33:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0xfffffffa, &(0x7f0000000040)) 17:33:18 executing program 3: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x3, 0x11, 0x15, "264f412a55f9fbb24085ea139a5db9676b314ae68d393b8c2da3d7d7ba3ebe5d6d80af66a133143218cb0a00dcfbd127e04498094a066fa80033f1ece05bd7fb", "f9c12cc38eb6de509726f8682a37064cb7b1a6ce3f974c859eebe1754cf8551a597e23155f73faa2c5a549058527d17c20608e9f6526ac00b7ec5fccff36dff8", "9c47c87439a333a7b5c6f9826ab6376d3d782cf6eabfa7716892fe3d14b7311f", [0xffff, 0x5]}) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x3cd9, &(0x7f0000000040)={0x0, 0x6d3c, 0x10, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x110, r4, 0x8000000) 17:33:18 executing program 5: r0 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x10010, r0, 0x100) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x0, &(0x7f0000000100)) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0xfffffff9, 0x3, 0xe4ec}) 17:33:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdc03, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}}, 0x10) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) shmget(0x2, 0x2000, 0x54000000, &(0x7f0000ffb000/0x2000)=nil) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x3cd9, &(0x7f0000000040)={0x0, 0x6d3c, 0x10, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x110, r4, 0x8000000) 17:33:18 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf25050000000c00060003000000000000002400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c00050004000000000000000c000300980d0000000000001400078008000100", @ANYRES32, @ANYBLOB="359f0100", @ANYRES32, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000200)) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x0, &(0x7f0000000100)) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000100)={{0x9, 0x5}, 'port0\x00', 0x30, 0x2, 0x8001, 0x1, 0x80000000, 0xfffff610, 0x1, 0x0, 0x2, 0x18}) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x400102) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) geteuid() 17:33:18 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, 0x0, &(0x7f0000000100)) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x3cd9, &(0x7f0000000040)={0x0, 0x6d3c, 0x10, 0x2, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x6, 0x4, 0x40, 0x5, 0x0, 0x8, 0x34025, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x4300, 0x9, 0x9, 0x6, 0x6, 0x6, 0x8, 0x0, 0x5, 0x0, 0x7f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x14) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 3: r0 = socket(0x1f, 0x2, 0x115c) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 5: shmget(0x1, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) r0 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x3000) shmdt(r1) shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) fork() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), 0x0) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:18 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0xffff8001, 0x1, 0x6, {0xb355, 0x1ff}, 0x3, 0x3}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x9, 0x800, 0x0, &(0x7f0000000000)) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x33b1, &(0x7f0000000040), &(0x7f0000c89000/0x1000)=nil, &(0x7f0000e2d000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_io_uring_setup(0x71af, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) pidfd_open(0xffffffffffffffff, 0x0) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), 0x0) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000240), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 3: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 0: wait4(0xffffffffffffffff, &(0x7f0000000040), 0x60000005, 0x0) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 17:33:18 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x4, 0x2, {0x0, 0x3, 0xb12, 0x2, 0x1}, 0x4}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 1: ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000440)={0x6}) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 17:33:18 executing program 4: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x8000000) syz_io_uring_setup(0x58f4, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f00000000c0), 0x0) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x4080) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/2, 0x2}) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000000)) 17:33:18 executing program 1: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)=""/166, &(0x7f00000002c0)=0xa6) r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000280)=0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) 17:33:18 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) r3 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) r4 = socket(0x1, 0x3, 0x0) recvfrom$inet6(r4, &(0x7f0000000180)=""/28, 0x1c, 0x40002000, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @local, 0x80000001}, 0x1c) 17:33:18 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="96bc6d9b4410479a232cbbeac685c89d", 0x10) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x4b5, 0x1, 0x9, {0x93, 0xe8}, 0x8001, 0x1f}) 17:33:18 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800, 0x181080) read$usbmon(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "01111930dfd44563", "5c2915d64bf7b868bf24315f887cc152", "60ab9705", "9bab5e3c732bf8a9"}, 0x28) shmget(0x0, 0x1000, 0x400, &(0x7f0000ffb000/0x1000)=nil) recvfrom$inet6(r1, &(0x7f0000000000)=""/17, 0x11, 0x2, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="08b74ec59457bd570252b00c64fbbfaa", 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17:33:18 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x8b}, 'port1\x00', 0x80, 0x10, 0x1, 0x611, 0x0, 0x9, 0xffffff00, 0x0, 0x0, 0x5}) 17:33:18 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = io_uring_setup(0x1025, &(0x7f0000000440)={0x0, 0xc7e0, 0x0, 0x2, 0x28f, 0x0, r0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) r2 = socket$inet6(0xa, 0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x2, 0x1, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000500)={0x4, 0x0, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, r3, r0, r5]}, 0x5) 17:33:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000780)=@ccm_128={{}, "066e187663547998", "5c2915d64bf7b868bf24315f887cc152", "7eab97f9", "9bab5e3c732bf8a9"}, 0x28) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="bc0302b14d183654637a4ba54c43daaa", 0x10) 17:33:19 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 17:33:19 executing program 3: r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000a, 0x11, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) r3 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) r4 = socket(0x1, 0x3, 0x0) recvfrom$inet6(r4, &(0x7f0000000180)=""/28, 0x1c, 0x40002000, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @local, 0x80000001}, 0x1c) 17:33:19 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) read$ptp(0xffffffffffffffff, &(0x7f0000000040)=""/118, 0x76) 17:33:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:19 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 17:33:19 executing program 3: socketpair$nbd(0xa, 0x1, 0x0, &(0x7f0000000040)) 17:33:19 executing program 1: r0 = syz_io_uring_setup(0x71af, &(0x7f0000000340), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/38, 0x26}, {0x0}, {&(0x7f0000000180)}, {&(0x7f0000000040)=""/196, 0xc4}, {&(0x7f0000000140)=""/123, 0x7b}], 0x1000000000000376) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/232, 0xe8}], 0x4) 17:33:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000880)) socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8004) 17:33:19 executing program 5: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000