Extracting prog: 2h4m52.351500532s Minimizing prog: 12m51.095375552s Simplifying prog options: 3m51.893289377s Extracting C: 1m21.71941828s Simplifying C: 0s extracting reproducer from 24 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_REQBUFS-ioctl$vim2m_VIDIOC_QBUF-ioctl$vim2m_VIDIOC_QBUF-mmap-epoll_create1-syz_open_procfs-close_range-syz_open_dev$dri-ioctl$DRM_IOCTL_SYNCOBJ_CREATE-ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD-mkdir-clock_gettime-sendmsg$can_bcm-ioctl$FS_IOC_SETFLAGS-ioctl$DRM_IOCTL_MODE_GET_LEASE-ioctl$DRM_IOCTL_MODE_GET_LEASE-socket$vsock_stream-shutdown-ioctl$DRM_IOCTL_MODE_GET_LEASE-socket$inet6_tcp-bind$inet6-connect$inet6-ioctl$int_in-fcntl$dupfd-setsockopt$sock_int-sendmsg$NFT_BATCH-syz_genetlink_get_family_id$devlink-read$FUSE-ioctl$DRM_IOCTL_MODE_GETRESOURCES detailed listing: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 30s testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29, 14, 29, 30, 8, 9, 9, 3, 29, 24, 13, 10, 13, 15, 13, 4, 30, 30, 5, 29, 6, 9, 12] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0], 0x254}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4", 0x31) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x34) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async) sendmmsg$alg(r7, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x10}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={r8, 0x0, 0x30}, 0xc) executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="05130f000184a89196091503d00000"]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000290000000400000004000000000200001400000000000000290000003400"/48], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38193e6cd5271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f9561bcbb3a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0xaea7, 0x6, 0x4, 0x0, [0x0, 0x0], [0xd, 0x6, 0x9, 0x7fff], [0x627aee87, 0xda44, 0x2, 0x1], [0x1, 0xe, 0x7]}) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000380)={r13, 0x3, 0x1000, 0x0, 0x0, [0x0], [0x6, 0x20, 0x0, 0x8], [0x3, 0x6, 0x100, 0xd], [0x1000010000000, 0x0, 0x7effffffffffffff, 0x2000000000000008]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r14], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000680)={r6, 0x6, 0x1, 0x3, 0x1, [r7, r8, r9, r14], [0x7, 0xd, 0xc48, 0x4], [0x8, 0x2, 0x1, 0x5], [0x3, 0xb, 0x4, 0x7]}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000170100000400000042000000000000001800000000000000170100000400000006000000000000001800000000000000170100000300000000000000000000001810000000000000170100000200000000100000f30cc807b33dcb434119963323a920b2947e2916f8fba6b63eb34f401becdf2eefa505b729c0f2f45f1e8ec5bf33356c907b5124f556653d6eba3a3fea1e3d8e04ee1e31d5bb817d24ee18272c9bc731a1b49b9dbf8201a8f3e217cd1aae9b63e518ef5db9d05893744b332123a6bee2402a9e1b6f103a55cea6a3eed7e3163f9a1966179e19935360b741026a85256fb47da4716e6c6cdfa79664fcc5cc46ce0ed5602c5e048ff08ba229dc230305f916ee5eaed22f504b218e98d1035709dacc5899a83204026fad7f357c6817dc64db8c11f4a142e39fdc1c118d2e35569f0887f109eef8adb66f8db22d53d3ed981e4b4ff5c71556eb6246f21127d38b791019df5871696f2a9ca62a10085e164415e00de12fe9c182cce96905fe9562b25b766026696c4d1800f1893ed6eec9acae3550299df5e542040798ec0c2ccfb13c5682abf731086ab67d6c27bd583a50e56c6082453d01cf19fc0036ba6a0dd46b8e9fe3f6cd840e10958533a0118a54e2cd02ecc58303edce92fd9e8a2caddfd609af37e298a3d77268906128960a7ef2f4be4f51bf81170d95d696bd1961694701ae14fdbe836cc5aee7ea7f17930eb2a3d62b43388fab8680f0272b21262d6c85fabb1ebfe7c1fe437a61df9355a5f8cf8e19a9a180da58de357924cc9dea2e52b2b0163cf4534c63c510e4fa53df57ce36ed170ae342b3ace41e906ff1e7c94dbbbb20fbc4c6e016e954db62ed05b4b2f39803cde5b3f98ab6ec6ca11225caa1b5cc2d862fc6269cda3fa5885ecc112a48e198f2a1f4abccd43e48a425e1b60100d40892043bd06dbc8917eb55a12a5111817404d4cb81144112655bae2e5cae7314c0118042e8af3023dfda1ca15394a497df9c84c3c15fd5a11f7f3f7afae8842bacb878620c5c58bcd1bf993e5a282ea58e48d61292ada77a8066250e6d1125930bd23da60526bd0231844b031de29f6d96ff66774edd7b01991a7a7927a10190fc9ccc03f7b9a114cee90366570ba169cc5915b567a1325245f6d2efbf5fe62c333df5e0919ae1a0fe493c5168d2c4201d821c9be9b05f8bdd2bc862b4b8fb95f2a6fa6fe4dc880822966907d627fc8dea7146e55578e7ecace53cba5e4d5a269d063c92332f071f034806edb1db96560f11250ce2372a0975fb276753023436d946a811815dfa2711363d432d06f7c8ea5f7d6681c27fe35ca36466ba0aa982eae32e7172ab2549717b9fc30e6a90a3fe82934d2c52b52fb9428c7718b3ba0e042cb584b44a9dac8fe82cedaf4a11222192fa7d6aa44964e8a171d594ddd326d696b28c90fed565d2bab60a7bce936bd10ca256a3055c786d3f59b691bcc6963b1b0d760dd4101b12236f5d46298dc614ff899b96f4582c417bc8da70074384026f30871df7035be84f74c5e47daf37ebb554037668309fb95fb3835317e7c2dfa1efe149d19bdea2703a7a068be43ece815281efd503b42948c3d58dd1e31a4dd2324529d0dac780028b3489ec6704c81ee0957168a82beca1333440648cac930364716fa8470f03c8da7f358af04b40bd885bbd657c8b97031e0791e8c118c3ae265d7c6b175b454aa91918aea2ad4fcf9728fb299891eb83a06965c436be292d48b9ea07915bb7180f9ea260955301a52061518889e651b4cae2efaf1f1ab425cdcbeb262d614f3e439b26a55e472aab6133a1d1113ac181e813b9efe2547c514f8b06d3293c528ae0ad4b3654a533bfdfcfd6e276309b529e6945cb543a7f8d6295f7eeb12aebdab923029eacd1ccd981c235c57283c10d5ee2d60911ba0a285b5a29346b61240463d066f3857dc245183ebfc5d235f91dea611b071be0db9b85493a91ead19d2daf1be12e3baf7362879ae75b221fbd53f24a9470199b41bdff722f5208a67528f39b070485aa2faf9e4e22ce33253bcb2b8f383020e2f13a2c6d38456d9e21000af52e8d76ac890a947bd56457c4408105086773d540b38c61ca5703489bd9f1715245fb1a45cf4f392af115100756df7f63a1d6966f99a9b7a2be4cb09b1d8ff8f8e8e6770a79318b4f8e6a098a04b4a4fda5d028482b591cd4dfc61a82b66045f77d4992e0d60f9e7cddbc02e37edf01f861064559d2e944931a738f0519c73f4db457ed76cd790acd3a415299cb5caf4e00d6c582687f6511c10a2b453e7818d9b06a75e2c7ad7fff6085acd8a07ebaf58d2d89c099cfbc2512cfe1e559697a308ba9ce2fe065361b3e93bd2b4d66071f2224b33d1ea3e9a492ebb60a6e3218d6c743a8055096c075db5ff2c20628ac46b3eec7644b1e90e81fbeadd6957645311b1c6fef6444bc1c423cf997e7e4d597c611a7c37ebc4fbd4bb02cd8c6cbb68ef4ce779d5f9421d233ff2e353d0d25b1b7d2a7ad4834c0a9d2392513d0315fb5ed9121d72c210574073bd7479e3b9789e1aafe3bb99f8f08baa5c64fd5aecdbdac487d7718c28218fd7757050556caabbbb408bb0e1fc989836f17bafb8d7ea459f65946fef34a951ca35ae1bae4a92ffcd471a19b9a45f5f368a2a2d80ef8d6f35e1ef02dcab207e2d344ecc7278bd2c892bff133163886d28ac2ff62812b052ce2d2bc7f789f920888007c37f7d3c0fcdfe44dbc42fa2e09efbda90507890abecef67f17a0661e6a046f7818cd14efe0d8fdb22eacf1eaaa46c116c669f91339386c89aa645c50adf2f3a6f47fd7613936fc4a8aea8df7ad2d0e97c496ffb7c601c11b25055637196dcfe92cb8164aff0e69b95b5e0751253ca6a45d30a82db63c7cd75ce782e377065e60defbc197e50e741312588f3eba75daf847a930c517575788464d1a646c126906d0dab6353081893104798cd91b451331f777a910a6d6f9d70a4849bb9e94766d997bf01f7aef66f3f0b69509e1cd3f7771b3dc921574deead327ead360fdf2a7567c0c9ea71ba7494a499e92cdfd55fa4d0d1f091b5b739501d2931542d56d40df647a8c0b713ba5a5c40cb906988e194377448817e956b1c7c710346f5c898906b5558ae183505efe7db127299549adf031a7c45955bac45fadab5170561f6294815f8640c3f8055966896f1f8fd74d106fb0620b0766ddafc005cb8a6b585cfdccb522db7a3fdfbf0faae922d0783e1c458edd8da713ba501bd4e2b117feaccc0a775b1b7da0c7f5edd0a2a225ddf4d7242ddcb454fdd857ce75d27ab40dc1dd1d41f6d7bf1ad544960b661498eb30d28669ab03a81ee8c6264cc0d94a7a503e1c2860e24e83420bcbf11cf4c3a7469ff830deb19cc69215f62a9d44b815ddb3083dbd3d14b0988a622fa479264cc7552439b8e62593bf0ccc629b0a25025b5118b8dbbd24c9944ad1706532ce8f69ce5d08d38365b83a98ef59285d617a49feeda6415c888bf14c0cbc039d12fe6197fe8b49e8ff737e29b18494fb6e8211d57b036f571847eedb97347ddb325682e4bf878b69137f787ef8f992f7200b0f44e32fad42f0542320aaef0fbb47155e6387d773f0d2fa567f252e15ed9248910b30346fb58b59416641057e29722ec516c61db19487064a2b513d7e9496ccd173ae866612b19f88c2e5c522ff894bd157ddd408f898da40db9bcd25d4e48217e8e8d168ba6d627947ce7771fc7feed881e749df9c5e26e02a8eaf692353248641609016ed25b0d8eba434e4121eb15d87e3ce5415949cf6e6a5c79bb6e32d1da20c596a397056973999a57de11e56f9d2fb285fb1b7fb21c9fe86faabfac729e4be7d83c3e958a8f02df83bf69cd9ebfdda80bcb63b735f1836e01c008fb955dda49d32649049bec8c74452915069cf1ef4851fcacbae48c06fad7653497235e65f4c93fca4b8253c8ab1ff2b863a4f87886b469798a11bea30df5e6c44d11b13b811b8f74131f9d3314d57ab373f38c2b2f58ec4704fb9ef119276d548d5c347754d5e748c8d60b1b5c05d0d6ce3dc402411926d798e4f48c8b14f8e58e5499e0dffb082377899508684f0f54c229e5c77c65e0fcd28b2951bb02889fb2cbbe3f843655c3d261bcefa30518e0047fbab6e3d446aeafd08a66076af981fe08f7ac8daa513306ae18cf10bdc34a11300a40bb85d1258591dbe85597fc75c6f9416fb5b0bae35fa07edbb1b7abe52406622159d2e1f897b6e9e1aca3df40b7a8cf43a98bdd066d3fdc247da59434d570f79175c8457f84f558a2a634f7794acbae8d6cf4243e14c63131c8631cfe2b24092ef33cff9b5de511496b30e61a5d0383d2dc9c7cf228aee28a7337c706aa5681a9f02fab76bbf5aab58c548c52d4915b4c5224da70b5e2b51248f6ea82bcaba82cf00b671f3040c58aa48b87e187b27bf6fd15482c29daef937d86c97a3b648d17581ef837c8ef7bf7e9b72823ede2ecf91e67ce9690f8ef39b99d99bb8c0438100aad7ed6387516d0b79c5e75bd2bbaa32d550f50a73c0ed6b837538e4f1376c4fd0d23eed70467c5a17dfc0b6b9fce8757372cb74d1a0eb35f755ffb635f07b60daf86ad41525959c243ecde3d982c7b22b8a53d0626712d3ffdd5ba668016fc28ead526d5db9a289e3913d706af91cd38196f4ae9088ee30a7446dce8d7fb6103581fa3e0316629a16312c960b97ff1072f6b8525dcf7f0dd1a9aa3a91cd13bdea80034282a22408c4340c2abf820db7d2668a01298722efaa56992efd670939e5ed1855541f9afe9ae2b71a61b119cf63fd5a2a18419609aa733fb86802af2ab668ec24dd87ded99644b068beca01e22d7830b47562290cd647aac276a0e0c51fabec3922ff9f86116f22717b08b9ce5f1e637ac338072d698631ca3712dfbcc442c98359bb889fbb12ce1e2e8f456b005209b687c0cc014b0d2ce3541574aed48240f32666bb9c5e81512b7218e9bfc5373591efe320c6edb33f15df84f104f7967551d809c8898298fd3b35e3c94a67a2debc4eeaabae65173351700f04d43193ee4ecc4e0e47af6fa1dc62a47a111ce4b6f546f0d27d15d4836dfd2eac9d3e928034c0fce9494ac6b424c68507ac7bbbe7d73f44eaff6207826339399a693b2a5fda56b3b1853f22ea45e9e53dd97c28cf65b8683b203069c46a5bf4a14d9e5cb2397c2dd74a180b190ff0a53079f2858b7612052e125507ae55d1d96a03dce5e4f00f21baee559b75f3d72a660312c6b74b6574232ef4b99bec2bfed7ba85d11268861ce34fe6e79facf1f682b1104705663253f3600b53b58466ff04c65b83cf98ae463f6873cd4b0a1123a65b2abdec4f811a025576f939116ff3199396b39bbde35cef998bd50e11d089b6c654eda0e811c6744cffba7cee73a132991ca6904e02cb45c38d26cdec4e59847846fc08bfeeb883069dae26d6cdde05550a87b8cb1adb8df7bce2b85defc5e0d8279163e39cd3cfe927a66c1d2536479659cd284491e2cdcd919f78ed5d550c1bff30d9ef6344e459caacf078c59ff6735a7667d27c1b0252525c00d0015b04144457ae1008fb3aa9f3c345abdd04621afaf6c70e19370ef34662316ed8de903c6a67e60d7731106444efca725ae1644bf12b1c0b6a0073bd10acd4fc9e45cd3ab8dffc2aa91d268dc3269f07afa121391afd6be3ee102d89a4bcbb744f68e1323e8c3845fad75315b01e8fc1abf2e9c60717f70f4f21a013c5986bb41a28c278b1fa2e5ff5ea8a591fbc9f4624b0467b091e71faa49965305ecdd9aa7db80d32ec265c180fcfcc90d0ba0a2202c20858fb86ef2f26aa54e287eeda98eeb79eca8c3f18a8af3aa27baafcf797e1e0c9d86e9de33bec645c518124e2a100ef80af393800000000"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: bisecting 24 programs bisect: split chunks (needed=false): <23> bisect: split chunk #0 of len 23 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=34s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 24, 13, 10, 13, 15, 13, 4, 30, 30, 5, 29, 6, 9, 12] detailed listing: executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000008000240000000065c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070296d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f3000000000080001400000002009000200"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30, 30, 5, 29, 6, 9, 12] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000008000240000000065c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070296d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f3000000000080001400000002009000200"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 24, 13, 10, 13, 15, 13, 30] detailed listing: executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "903e09fd6b2821733ef16614486e2264756e57202e8057f8969810aaa4393e4e6eec706bdadf78fca072fe044ad5fd9200af371db9f64683582844278d34df320a5d090000002a0fefb365b72f6dfaffc96c4937cfa465db377cfa24dbc2f89fe65d396e340e72a66a84154bab093274f9ec58466948523244d0172e41bf501f7ee08d36eb695efa1926c69200004ce34fbbed2067d675dd55b55d7817fe94c89d37920e586d640100000030f908bdd251a86a0c736a4bfad4e888381c90fa896258e020f596b6e1fc6ba8e5259ac3805915e7bfd4bb6199194cd1597340b2984fcdb35588f6cef6dfcc07fe888941770eb539052f666adf0ee5aa0b513ce54662ab6215654d32472507d3c4db5473a3ece423d2e99f22978756a4aea80c8652a8ce"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) program did not crash bisect: split chunks (needed=true): <8>, <7> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 13, 15, 13, 4, 30, 30, 5, 29, 6, 9, 12] detailed listing: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000008000240000000065c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070296d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f3000000000080001400000002009000200"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 24, 13, 4, 30, 30, 5, 29, 6, 9, 12] detailed listing: executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000170100000400000042000000000000001800000000000000170100000400000006000000000000001800000000000000170100000300000000000000000000001810000000000000170100000200000000100000f30cc807b33dcb434119963323a920b2947e2916f8fba6b63eb34f401becdf2eefa505b729c0f2f45f1e8ec5bf33356c907b5124f556653d6eba3a3fea1e3d8e04ee1e31d5bb817d24ee18272c9bc731a1b49b9dbf8201a8f3e217cd1aae9b63e518ef5db9d05893744b332123a6bee2402a9e1b6f103a55cea6a3eed7e3163f9a1966179e19935360b741026a85256fb47da4716e6c6cdfa79664fcc5cc46ce0ed5602c5e048ff08ba229dc230305f916ee5eaed22f504b218e98d1035709dacc5899a83204026fad7f357c6817dc64db8c11f4a142e39fdc1c118d2e35569f0887f109eef8adb66f8db22d53d3ed981e4b4ff5c71556eb6246f21127d38b791019df5871696f2a9ca62a10085e164415e00de12fe9c182cce96905fe9562b25b766026696c4d1800f1893ed6eec9acae3550299df5e542040798ec0c2ccfb13c5682abf731086ab67d6c27bd583a50e56c6082453d01cf19fc0036ba6a0dd46b8e9fe3f6cd840e10958533a0118a54e2cd02ecc58303edce92fd9e8a2caddfd609af37e298a3d77268906128960a7ef2f4be4f51bf81170d95d696bd1961694701ae14fdbe836cc5aee7ea7f17930eb2a3d62b43388fab8680f0272b21262d6c85fabb1ebfe7c1fe437a61df9355a5f8cf8e19a9a180da58de357924cc9dea2e52b2b0163cf4534c63c510e4fa53df57ce36ed170ae342b3ace41e906ff1e7c94dbbbb20fbc4c6e016e954db62ed05b4b2f39803cde5b3f98ab6ec6ca11225caa1b5cc2d862fc6269cda3fa5885ecc112a48e198f2a1f4abccd43e48a425e1b60100d40892043bd06dbc8917eb55a12a5111817404d4cb81144112655bae2e5cae7314c0118042e8af3023dfda1ca15394a497df9c84c3c15fd5a11f7f3f7afae8842bacb878620c5c58bcd1bf993e5a282ea58e48d61292ada77a8066250e6d1125930bd23da60526bd0231844b031de29f6d96ff66774edd7b01991a7a7927a10190fc9ccc03f7b9a114cee90366570ba169cc5915b567a1325245f6d2efbf5fe62c333df5e0919ae1a0fe493c5168d2c4201d821c9be9b05f8bdd2bc862b4b8fb95f2a6fa6fe4dc880822966907d627fc8dea7146e55578e7ecace53cba5e4d5a269d063c92332f071f034806edb1db96560f11250ce2372a0975fb276753023436d946a811815dfa2711363d432d06f7c8ea5f7d6681c27fe35ca36466ba0aa982eae32e7172ab2549717b9fc30e6a90a3fe82934d2c52b52fb9428c7718b3ba0e042cb584b44a9dac8fe82cedaf4a11222192fa7d6aa44964e8a171d594ddd326d696b28c90fed565d2bab60a7bce936bd10ca256a3055c786d3f59b691bcc6963b1b0d760dd4101b12236f5d46298dc614ff899b96f4582c417bc8da70074384026f30871df7035be84f74c5e47daf37ebb554037668309fb95fb3835317e7c2dfa1efe149d19bdea2703a7a068be43ece815281efd503b42948c3d58dd1e31a4dd2324529d0dac780028b3489ec6704c81ee0957168a82beca1333440648cac930364716fa8470f03c8da7f358af04b40bd885bbd657c8b97031e0791e8c118c3ae265d7c6b175b454aa91918aea2ad4fcf9728fb299891eb83a06965c436be292d48b9ea07915bb7180f9ea260955301a52061518889e651b4cae2efaf1f1ab425cdcbeb262d614f3e439b26a55e472aab6133a1d1113ac181e813b9efe2547c514f8b06d3293c528ae0ad4b3654a533bfdfcfd6e276309b529e6945cb543a7f8d6295f7eeb12aebdab923029eacd1ccd981c235c57283c10d5ee2d60911ba0a285b5a29346b61240463d066f3857dc245183ebfc5d235f91dea611b071be0db9b85493a91ead19d2daf1be12e3baf7362879ae75b221fbd53f24a9470199b41bdff722f5208a67528f39b070485aa2faf9e4e22ce33253bcb2b8f383020e2f13a2c6d38456d9e21000af52e8d76ac890a947bd56457c4408105086773d540b38c61ca5703489bd9f1715245fb1a45cf4f392af115100756df7f63a1d6966f99a9b7a2be4cb09b1d8ff8f8e8e6770a79318b4f8e6a098a04b4a4fda5d028482b591cd4dfc61a82b66045f77d4992e0d60f9e7cddbc02e37edf01f861064559d2e944931a738f0519c73f4db457ed76cd790acd3a415299cb5caf4e00d6c582687f6511c10a2b453e7818d9b06a75e2c7ad7fff6085acd8a07ebaf58d2d89c099cfbc2512cfe1e559697a308ba9ce2fe065361b3e93bd2b4d66071f2224b33d1ea3e9a492ebb60a6e3218d6c743a8055096c075db5ff2c20628ac46b3eec7644b1e90e81fbeadd6957645311b1c6fef6444bc1c423cf997e7e4d597c611a7c37ebc4fbd4bb02cd8c6cbb68ef4ce779d5f9421d233ff2e353d0d25b1b7d2a7ad4834c0a9d2392513d0315fb5ed9121d72c210574073bd7479e3b9789e1aafe3bb99f8f08baa5c64fd5aecdbdac487d7718c28218fd7757050556caabbbb408bb0e1fc989836f17bafb8d7ea459f65946fef34a951ca35ae1bae4a92ffcd471a19b9a45f5f368a2a2d80ef8d6f35e1ef02dcab207e2d344ecc7278bd2c892bff133163886d28ac2ff62812b052ce2d2bc7f789f920888007c37f7d3c0fcdfe44dbc42fa2e09efbda90507890abecef67f17a0661e6a046f7818cd14efe0d8fdb22eacf1eaaa46c116c669f91339386c89aa645c50adf2f3a6f47fd7613936fc4a8aea8df7ad2d0e97c496ffb7c601c11b25055637196dcfe92cb8164aff0e69b95b5e0751253ca6a45d30a82db63c7cd75ce782e377065e60defbc197e50e741312588f3eba75daf847a930c517575788464d1a646c126906d0dab6353081893104798cd91b451331f777a910a6d6f9d70a4849bb9e94766d997bf01f7aef66f3f0b69509e1cd3f7771b3dc921574deead327ead360fdf2a7567c0c9ea71ba7494a499e92cdfd55fa4d0d1f091b5b739501d2931542d56d40df647a8c0b713ba5a5c40cb906988e194377448817e956b1c7c710346f5c898906b5558ae183505efe7db127299549adf031a7c45955bac45fadab5170561f6294815f8640c3f8055966896f1f8fd74d106fb0620b0766ddafc005cb8a6b585cfdccb522db7a3fdfbf0faae922d0783e1c458edd8da713ba501bd4e2b117feaccc0a775b1b7da0c7f5edd0a2a225ddf4d7242ddcb454fdd857ce75d27ab40dc1dd1d41f6d7bf1ad544960b661498eb30d28669ab03a81ee8c6264cc0d94a7a503e1c2860e24e83420bcbf11cf4c3a7469ff830deb19cc69215f62a9d44b815ddb3083dbd3d14b0988a622fa479264cc7552439b8e62593bf0ccc629b0a25025b5118b8dbbd24c9944ad1706532ce8f69ce5d08d38365b83a98ef59285d617a49feeda6415c888bf14c0cbc039d12fe6197fe8b49e8ff737e29b18494fb6e8211d57b036f571847eedb97347ddb325682e4bf878b69137f787ef8f992f7200b0f44e32fad42f0542320aaef0fbb47155e6387d773f0d2fa567f252e15ed9248910b30346fb58b59416641057e29722ec516c61db19487064a2b513d7e9496ccd173ae866612b19f88c2e5c522ff894bd157ddd408f898da40db9bcd25d4e48217e8e8d168ba6d627947ce7771fc7feed881e749df9c5e26e02a8eaf692353248641609016ed25b0d8eba434e4121eb15d87e3ce5415949cf6e6a5c79bb6e32d1da20c596a397056973999a57de11e56f9d2fb285fb1b7fb21c9fe86faabfac729e4be7d83c3e958a8f02df83bf69cd9ebfdda80bcb63b735f1836e01c008fb955dda49d32649049bec8c74452915069cf1ef4851fcacbae48c06fad7653497235e65f4c93fca4b8253c8ab1ff2b863a4f87886b469798a11bea30df5e6c44d11b13b811b8f74131f9d3314d57ab373f38c2b2f58ec4704fb9ef119276d548d5c347754d5e748c8d60b1b5c05d0d6ce3dc402411926d798e4f48c8b14f8e58e5499e0dffb082377899508684f0f54c229e5c77c65e0fcd28b2951bb02889fb2cbbe3f843655c3d261bcefa30518e0047fbab6e3d446aeafd08a66076af981fe08f7ac8daa513306ae18cf10bdc34a11300a40bb85d1258591dbe85597fc75c6f9416fb5b0bae35fa07edbb1b7abe52406622159d2e1f897b6e9e1aca3df40b7a8cf43a98bdd066d3fdc247da59434d570f79175c8457f84f558a2a634f7794acbae8d6cf4243e14c63131c8631cfe2b24092ef33cff9b5de511496b30e61a5d0383d2dc9c7cf228aee28a7337c706aa5681a9f02fab76bbf5aab58c548c52d4915b4c5224da70b5e2b51248f6ea82bcaba82cf00b671f3040c58aa48b87e187b27bf6fd15482c29daef937d86c97a3b648d17581ef837c8ef7bf7e9b72823ede2ecf91e67ce9690f8ef39b99d99bb8c0438100aad7ed6387516d0b79c5e75bd2bbaa32d550f50a73c0ed6b837538e4f1376c4fd0d23eed70467c5a17dfc0b6b9fce8757372cb74d1a0eb35f755ffb635f07b60daf86ad41525959c243ecde3d982c7b22b8a53d0626712d3ffdd5ba668016fc28ead526d5db9a289e3913d706af91cd38196f4ae9088ee30a7446dce8d7fb6103581fa3e0316629a16312c960b97ff1072f6b8525dcf7f0dd1a9aa3a91cd13bdea80034282a22408c4340c2abf820db7d2668a01298722efaa56992efd670939e5ed1855541f9afe9ae2b71a61b119cf63fd5a2a18419609aa733fb86802af2ab668ec24dd87ded99644b068beca01e22d7830b47562290cd647aac276a0e0c51fabec3922ff9f86116f22717b08b9ce5f1e637ac338072d698631ca3712dfbcc442c98359bb889fbb12ce1e2e8f456b005209b687c0cc014b0d2ce3541574aed48240f32666bb9c5e81512b7218e9bfc5373591efe320c6edb33f15df84f104f7967551d809c8898298fd3b35e3c94a67a2debc4eeaabae65173351700f04d43193ee4ecc4e0e47af6fa1dc62a47a111ce4b6f546f0d27d15d4836dfd2eac9d3e928034c0fce9494ac6b424c68507ac7bbbe7d73f44eaff6207826339399a693b2a5fda56b3b1853f22ea45e9e53dd97c28cf65b8683b203069c46a5bf4a14d9e5cb2397c2dd74a180b190ff0a53079f2858b7612052e125507ae55d1d96a03dce5e4f00f21baee559b75f3d72a660312c6b74b6574232ef4b99bec2bfed7ba85d11268861ce34fe6e79facf1f682b1104705663253f3600b53b58466ff04c65b83cf98ae463f6873cd4b0a1123a65b2abdec4f811a025576f939116ff3199396b39bbde35cef998bd50e11d089b6c654eda0e811c6744cffba7cee73a132991ca6904e02cb45c38d26cdec4e59847846fc08bfeeb883069dae26d6cdde05550a87b8cb1adb8df7bce2b85defc5e0d8279163e39cd3cfe927a66c1d2536479659cd284491e2cdcd919f78ed5d550c1bff30d9ef6344e459caacf078c59ff6735a7667d27c1b0252525c00d0015b04144457ae1008fb3aa9f3c345abdd04621afaf6c70e19370ef34662316ed8de903c6a67e60d7731106444efca725ae1644bf12b1c0b6a0073bd10acd4fc9e45cd3ab8dffc2aa91d268dc3269f07afa121391afd6be3ee102d89a4bcbb744f68e1323e8c3845fad75315b01e8fc1abf2e9c60717f70f4f21a013c5986bb41a28c278b1fa2e5ff5ea8a591fbc9f4624b0467b091e71faa49965305ecdd9aa7db80d32ec265c180fcfcc90d0ba0a2202c20858fb86ef2f26aa54e287eeda98eeb79eca8c3f18a8af3aa27baafcf797e1e0c9d86e9de33bec645c518124e2a100ef80af393800000000"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: split chunk #1 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=33s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 24, 13, 10, 13, 15, 13, 30, 6, 9, 12] detailed listing: executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4>, <4>, <3> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 13, 15, 13, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 15, 13, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=32s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 13, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: split chunk #2 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 13, 30, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 13, 30, 6, 9] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) program did not crash bisect: split chunks (needed=true): <2>, <2>, <2>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 10, 13, 30, 6, 9, 12] detailed listing: executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 10, 13, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 13, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 30, 6, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: split chunk #2 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=31s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #3 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1>, <1>, <1>, <1>, <1, final> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #2 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #3 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 6 programs left: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x3, r5, 0xffffffffffffffff, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) bisect: trying to concatenate bisect: concatenate 6 entries minimizing program #0 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [23, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r6 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [22, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r5 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000002340), 0x80) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r5 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) r5 = fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) fsopen(&(0x7f0000000480)='vxfs\x00', 0x1) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) sysfs$1(0x3, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x88}, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sysfs$1(0x3, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), 0x1008000, 0x0) sysfs$1(0x3, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 13, 10, 30, 9, 12] detailed listing: executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x1}}, './file0/file0\x00'}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) r2 = semget$private(0x0, 0x2, 0xb) semctl$SEM_STAT_ANY(r2, 0x0, 0x14, &(0x7f0000000380)=""/175) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000240)=""/49) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x20000, 0x1, 0x5, '\x00', 0x0, r3, 0x0, 0x1, 0x3, 0x4}, 0x50) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) sysfs$1(0x3, 0x0) executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_eee={0x44}}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) read$FUSE(r9, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1, 0x5}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0x <> ffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 28, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 27, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 26, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000380), 0x4) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 25, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) fcntl$dupfd(r8, 0x406, r8) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 24, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 23, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 22, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 21, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_tcp(0xa, 0x1, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 20, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000480)={0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 19, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 18, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$vsock_stream(0x28, 0x1, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 17, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 16, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 15, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000000)={r4}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 14, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)={r3}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="160000000000000007000000000000009c407c796bfb0a07050a210b64954025e1b52cdcb95dc8fe25d98b5325a2c026061a3eff5a6bd698faa7aed241d548690080000073176dd1c8f4249decc760073a8cf49f420bf051d5c8341bbb6fdd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x48080}, 0x20004054) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 13, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)={r3}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 12, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)={r3}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 11, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)={r3}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 10, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 9, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 8, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 8, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 7, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) epoll_create1(0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 6, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 5, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x85, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 4, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 3, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 9, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks minimized 30 calls -> 2 calls minimizing program #4 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 8, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 8, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 7, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 6, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 5, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 5, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program did not crash testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 12] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) ioctl$UI_DEV_CREATE(r0, 0x5501) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks minimized 9 calls -> 4 calls minimizing program #5 before concatenation testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 11] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 10] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 9] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 8] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 7] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 6] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x40}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 5] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socket$nl_route(0x10, 0x3, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 4] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 3] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x0, 0x10, 0x9}, 0x3e, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x20000001, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0xb8, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0xfffffffe, 0x0, 0x9d65, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0xeda3, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0x40, 0xcaa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x2, 0x0, 0x3, 0xfffffffd, 0x0, 0xf, 0x4]}, 0x45c) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 2] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 1] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 1, 1, 2, 4, 0] detailed listing: executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 0: program did not crash minimized 12 calls -> 1 calls testing program (duration=46.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sysfs$1-io_uring_setup-socket$nl_route-ioctl$vim2m_VIDIOC_REQBUFS-syz_open_dev$dri-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-openat$uinput detailed listing: executing program 0: sysfs$1(0x3, 0x0) io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash bisect: concatenated prog does not crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$vim2m_VIDIOC_REQBUFS-syz_open_dev$dri detailed listing: executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 24 programs with base timeout 1m40s testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29, 14, 29, 30, 8, 9, 9, 3, 29, 1, 1, 1, 13, 15, 13, 4, 2, 30, 5, 29, 6, 4, 1] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0], 0x254}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4", 0x31) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x34) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async) sendmmsg$alg(r7, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x10}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={r8, 0x0, 0x30}, 0xc) executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="05130f000184a89196091503d00000"]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000290000000400000004000000000200001400000000000000290000003400"/48], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38193e6cd5271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f9561bcbb3a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0xaea7, 0x6, 0x4, 0x0, [0x0, 0x0], [0xd, 0x6, 0x9, 0x7fff], [0x627aee87, 0xda44, 0x2, 0x1], [0x1, 0xe, 0x7]}) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000380)={r13, 0x3, 0x1000, 0x0, 0x0, [0x0], [0x6, 0x20, 0x0, 0x8], [0x3, 0x6, 0x100, 0xd], [0x1000010000000, 0x0, 0x7effffffffffffff, 0x2000000000000008]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r14], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000680)={r6, 0x6, 0x1, 0x3, 0x1, [r7, r8, r9, r14], [0x7, 0xd, 0xc48, 0x4], [0x8, 0x2, 0x1, 0x5], [0x3, 0xb, 0x4, 0x7]}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000170100000400000042000000000000001800000000000000170100000400000006000000000000001800000000000000170100000300000000000000000000001810000000000000170100000200000000100000f30cc807b33dcb434119963323a920b2947e2916f8fba6b63eb34f401becdf2eefa505b729c0f2f45f1e8ec5bf33356c907b5124f556653d6eba3a3fea1e3d8e04ee1e31d5bb817d24ee18272c9bc731a1b49b9dbf8201a8f3e217cd1aae9b63e518ef5db9d05893744b332123a6bee2402a9e1b6f103a55cea6a3eed7e3163f9a1966179e19935360b741026a85256fb47da4716e6c6cdfa79664fcc5cc46ce0ed5602c5e048ff08ba229dc230305f916ee5eaed22f504b218e98d1035709dacc5899a83204026fad7f357c6817dc64db8c11f4a142e39fdc1c118d2e35569f0887f109eef8adb66f8db22d53d3ed981e4b4ff5c71556eb6246f21127d38b791019df5871696f2a9ca62a10085e164415e00de12fe9c182cce96905fe9562b25b766026696c4d1800f1893ed6eec9acae3550299df5e542040798ec0c2ccfb13c5682abf731086ab67d6c27bd583a50e56c6082453d01cf19fc0036ba6a0dd46b8e9fe3f6cd840e10958533a0118a54e2cd02ecc58303edce92fd9e8a2caddfd609af37e298a3d77268906128960a7ef2f4be4f51bf81170d95d696bd1961694701ae14fdbe836cc5aee7ea7f17930eb2a3d62b43388fab8680f0272b21262d6c85fabb1ebfe7c1fe437a61df9355a5f8cf8e19a9a180da58de357924cc9dea2e52b2b0163cf4534c63c510e4fa53df57ce36ed170ae342b3ace41e906ff1e7c94dbbbb20fbc4c6e016e954db62ed05b4b2f39803cde5b3f98ab6ec6ca11225caa1b5cc2d862fc6269cda3fa5885ecc112a48e198f2a1f4abccd43e48a425e1b60100d40892043bd06dbc8917eb55a12a5111817404d4cb81144112655bae2e5cae7314c0118042e8af3023dfda1ca15394a497df9c84c3c15fd5a11f7f3f7afae8842bacb878620c5c58bcd1bf993e5a282ea58e48d61292ada77a8066250e6d1125930bd23da60526bd0231844b031de29f6d96ff66774edd7b01991a7a7927a10190fc9ccc03f7b9a114cee90366570ba169cc5915b567a1325245f6d2efbf5fe62c333df5e0919ae1a0fe493c5168d2c4201d821c9be9b05f8bdd2bc862b4b8fb95f2a6fa6fe4dc880822966907d627fc8dea7146e55578e7ecace53cba5e4d5a269d063c92332f071f034806edb1db96560f11250ce2372a0975fb276753023436d946a811815dfa2711363d432d06f7c8ea5f7d6681c27fe35ca36466ba0aa982eae32e7172ab2549717b9fc30e6a90a3fe82934d2c52b52fb9428c7718b3ba0e042cb584b44a9dac8fe82cedaf4a11222192fa7d6aa44964e8a171d594ddd326d696b28c90fed565d2bab60a7bce936bd10ca256a3055c786d3f59b691bcc6963b1b0d760dd4101b12236f5d46298dc614ff899b96f4582c417bc8da70074384026f30871df7035be84f74c5e47daf37ebb554037668309fb95fb3835317e7c2dfa1efe149d19bdea2703a7a068be43ece815281efd503b42948c3d58dd1e31a4dd2324529d0dac780028b3489ec6704c81ee0957168a82beca1333440648cac930364716fa8470f03c8da7f358af04b40bd885bbd657c8b97031e0791e8c118c3ae265d7c6b175b454aa91918aea2ad4fcf9728fb299891eb83a06965c436be292d48b9ea07915bb7180f9ea260955301a52061518889e651b4cae2efaf1f1ab425cdcbeb262d614f3e439b26a55e472aab6133a1d1113ac181e813b9efe2547c514f8b06d3293c528ae0ad4b3654a533bfdfcfd6e276309b529e6945cb543a7f8d6295f7eeb12aebdab923029eacd1ccd981c235c57283c10d5ee2d60911ba0a285b5a29346b61240463d066f3857dc245183ebfc5d235f91dea611b071be0db9b85493a91ead19d2daf1be12e3baf7362879ae75b221fbd53f24a9470199b41bdff722f5208a67528f39b070485aa2faf9e4e22ce33253bcb2b8f383020e2f13a2c6d38456d9e21000af52e8d76ac890a947bd56457c4408105086773d540b38c61ca5703489bd9f1715245fb1a45cf4f392af115100756df7f63a1d6966f99a9b7a2be4cb09b1d8ff8f8e8e6770a79318b4f8e6a098a04b4a4fda5d028482b591cd4dfc61a82b66045f77d4992e0d60f9e7cddbc02e37edf01f861064559d2e944931a738f0519c73f4db457ed76cd790acd3a415299cb5caf4e00d6c582687f6511c10a2b453e7818d9b06a75e2c7ad7fff6085acd8a07ebaf58d2d89c099cfbc2512cfe1e559697a308ba9ce2fe065361b3e93bd2b4d66071f2224b33d1ea3e9a492ebb60a6e3218d6c743a8055096c075db5ff2c20628ac46b3eec7644b1e90e81fbeadd6957645311b1c6fef6444bc1c423cf997e7e4d597c611a7c37ebc4fbd4bb02cd8c6cbb68ef4ce779d5f9421d233ff2e353d0d25b1b7d2a7ad4834c0a9d2392513d0315fb5ed9121d72c210574073bd7479e3b9789e1aafe3bb99f8f08baa5c64fd5aecdbdac487d7718c28218fd7757050556caabbbb408bb0e1fc989836f17bafb8d7ea459f65946fef34a951ca35ae1bae4a92ffcd471a19b9a45f5f368a2a2d80ef8d6f35e1ef02dcab207e2d344ecc7278bd2c892bff133163886d28ac2ff62812b052ce2d2bc7f789f920888007c37f7d3c0fcdfe44dbc42fa2e09efbda90507890abecef67f17a0661e6a046f7818cd14efe0d8fdb22eacf1eaaa46c116c669f91339386c89aa645c50adf2f3a6f47fd7613936fc4a8aea8df7ad2d0e97c496ffb7c601c11b25055637196dcfe92cb8164aff0e69b95b5e0751253ca6a45d30a82db63c7cd75ce782e377065e60defbc197e50e741312588f3eba75daf847a930c517575788464d1a646c126906d0dab6353081893104798cd91b451331f777a910a6d6f9d70a4849bb9e94766d997bf01f7aef66f3f0b69509e1cd3f7771b3dc921574deead327ead360fdf2a7567c0c9ea71ba7494a499e92cdfd55fa4d0d1f091b5b739501d2931542d56d40df647a8c0b713ba5a5c40cb906988e194377448817e956b1c7c710346f5c898906b5558ae183505efe7db127299549adf031a7c45955bac45fadab5170561f6294815f8640c3f8055966896f1f8fd74d106fb0620b0766ddafc005cb8a6b585cfdccb522db7a3fdfbf0faae922d0783e1c458edd8da713ba501bd4e2b117feaccc0a775b1b7da0c7f5edd0a2a225ddf4d7242ddcb454fdd857ce75d27ab40dc1dd1d41f6d7bf1ad544960b661498eb30d28669ab03a81ee8c6264cc0d94a7a503e1c2860e24e83420bcbf11cf4c3a7469ff830deb19cc69215f62a9d44b815ddb3083dbd3d14b0988a622fa479264cc7552439b8e62593bf0ccc629b0a25025b5118b8dbbd24c9944ad1706532ce8f69ce5d08d38365b83a98ef59285d617a49feeda6415c888bf14c0cbc039d12fe6197fe8b49e8ff737e29b18494fb6e8211d57b036f571847eedb97347ddb325682e4bf878b69137f787ef8f992f7200b0f44e32fad42f0542320aaef0fbb47155e6387d773f0d2fa567f252e15ed9248910b30346fb58b59416641057e29722ec516c61db19487064a2b513d7e9496ccd173ae866612b19f88c2e5c522ff894bd157ddd408f898da40db9bcd25d4e48217e8e8d168ba6d627947ce7771fc7feed881e749df9c5e26e02a8eaf692353248641609016ed25b0d8eba434e4121eb15d87e3ce5415949cf6e6a5c79bb6e32d1da20c596a397056973999a57de11e56f9d2fb285fb1b7fb21c9fe86faabfac729e4be7d83c3e958a8f02df83bf69cd9ebfdda80bcb63b735f1836e01c008fb955dda49d32649049bec8c74452915069cf1ef4851fcacbae48c06fad7653497235e65f4c93fca4b8253c8ab1ff2b863a4f87886b469798a11bea30df5e6c44d11b13b811b8f74131f9d3314d57ab373f38c2b2f58ec4704fb9ef119276d548d5c347754d5e748c8d60b1b5c05d0d6ce3dc402411926d798e4f48c8b14f8e58e5499e0dffb082377899508684f0f54c229e5c77c65e0fcd28b2951bb02889fb2cbbe3f843655c3d261bcefa30518e0047fbab6e3d446aeafd08a66076af981fe08f7ac8daa513306ae18cf10bdc34a11300a40bb85d1258591dbe85597fc75c6f9416fb5b0bae35fa07edbb1b7abe52406622159d2e1f897b6e9e1aca3df40b7a8cf43a98bdd066d3fdc247da59434d570f79175c8457f84f558a2a634f7794acbae8d6cf4243e14c63131c8631cfe2b24092ef33cff9b5de511496b30e61a5d0383d2dc9c7cf228aee28a7337c706aa5681a9f02fab76bbf5aab58c548c52d4915b4c5224da70b5e2b51248f6ea82bcaba82cf00b671f3040c58aa48b87e187b27bf6fd15482c29daef937d86c97a3b648d17581ef837c8ef7bf7e9b72823ede2ecf91e67ce9690f8ef39b99d99bb8c0438100aad7ed6387516d0b79c5e75bd2bbaa32d550f50a73c0ed6b837538e4f1376c4fd0d23eed70467c5a17dfc0b6b9fce8757372cb74d1a0eb35f755ffb635f07b60daf86ad41525959c243ecde3d982c7b22b8a53d0626712d3ffdd5ba668016fc28ead526d5db9a289e3913d706af91cd38196f4ae9088ee30a7446dce8d7fb6103581fa3e0316629a16312c960b97ff1072f6b8525dcf7f0dd1a9aa3a91cd13bdea80034282a22408c4340c2abf820db7d2668a01298722efaa56992efd670939e5ed1855541f9afe9ae2b71a61b119cf63fd5a2a18419609aa733fb86802af2ab668ec24dd87ded99644b068beca01e22d7830b47562290cd647aac276a0e0c51fabec3922ff9f86116f22717b08b9ce5f1e637ac338072d698631ca3712dfbcc442c98359bb889fbb12ce1e2e8f456b005209b687c0cc014b0d2ce3541574aed48240f32666bb9c5e81512b7218e9bfc5373591efe320c6edb33f15df84f104f7967551d809c8898298fd3b35e3c94a67a2debc4eeaabae65173351700f04d43193ee4ecc4e0e47af6fa1dc62a47a111ce4b6f546f0d27d15d4836dfd2eac9d3e928034c0fce9494ac6b424c68507ac7bbbe7d73f44eaff6207826339399a693b2a5fda56b3b1853f22ea45e9e53dd97c28cf65b8683b203069c46a5bf4a14d9e5cb2397c2dd74a180b190ff0a53079f2858b7612052e125507ae55d1d96a03dce5e4f00f21baee559b75f3d72a660312c6b74b6574232ef4b99bec2bfed7ba85d11268861ce34fe6e79facf1f682b1104705663253f3600b53b58466ff04c65b83cf98ae463f6873cd4b0a1123a65b2abdec4f811a025576f939116ff3199396b39bbde35cef998bd50e11d089b6c654eda0e811c6744cffba7cee73a132991ca6904e02cb45c38d26cdec4e59847846fc08bfeeb883069dae26d6cdde05550a87b8cb1adb8df7bce2b85defc5e0d8279163e39cd3cfe927a66c1d2536479659cd284491e2cdcd919f78ed5d550c1bff30d9ef6344e459caacf078c59ff6735a7667d27c1b0252525c00d0015b04144457ae1008fb3aa9f3c345abdd04621afaf6c70e19370ef34662316ed8de903c6a67e60d7731106444efca725ae1644bf12b1c0b6a0073bd10acd4fc9e45cd3ab8dffc2aa91d268dc3269f07afa121391afd6be3ee102d89a4bcbb744f68e1323e8c3845fad75315b01e8fc1abf2e9c60717f70f4f21a013c5986bb41a28c278b1fa2e5ff5ea8a591fbc9f4624b0467b091e71faa49965305ecdd9aa7db80d32ec265c180fcfcc90d0ba0a2202c20858fb86ef2f26aa54e287eeda98eeb79eca8c3f18a8af3aa27baafcf797e1e0c9d86e9de33bec645c518124e2a100ef80af393800000000"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "903e09fd6b2821733ef16614486e2264756e57202e8057f8969810aaa4393e4e6eec706bdadf78fca072fe044ad5fd9200af371db9f64683582844278d34df320a5d090000002a0fefb365b72f6dfaffc96c4937cfa465db377cfa24dbc2f89fe65d396e340e72a66a84154bab093274f9ec58466948523244d0172e41bf501f7ee08d36eb695efa1926c69200004ce34fbbed2067d675dd55b55d7817fe94c89d37920e586d640100000030f908bdd251a86a0c736a4bfad4e888381c90fa896258e020f596b6e1fc6ba8e5259ac3805915e7bfd4bb6199194cd1597340b2984fcdb35588f6cef6dfcc07fe888941770eb539052f666adf0ee5aa0b513ce54662ab6215654d32472507d3c4db5473a3ece423d2e99f22978756a4aea80c8652a8ce"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: bisecting 24 programs bisect: split chunks (needed=false): <23> bisect: split chunk #0 of len 23 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29, 1, 1, 1, 13, 15, 13, 4, 2, 30, 5, 29, 6, 4, 1] detailed listing: executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 0: sysfs$1(0x3, 0x0) executing program 3: io_uring_setup(0x56ab, &(0x7f0000000140)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) executing program 0: socket$nl_route(0x10, 0x3, 0x0) executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000c40)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000500)=@copyright={0x1, 0x0, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffe, 0x80, 0x3231564e, 0x3, [0x2], [0x1, 0xffffffff, 0x4ec], [0x0, 0x0, 0x0, 0xfffffffc], [0xa1d6]}) (async) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0xbc, 0x6}, {0x6, 0x3}], r2}, 0x18, 0x2) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x4, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000180)={0x20, r6, 0x1, 0x0, &(0x7f0000000600)=[{}]}) (async) write(r1, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) (async) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x1, "92f3aec889aead4372495190f56f10fe4852f3e47eb566d7f3e56dd754345844", 0x1, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r3, 0x560b, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29, 14, 29, 30, 8, 9, 9, 4, 2, 30, 5, 29, 6, 4, 1] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0], 0x254}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4", 0x31) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x34) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async) sendmmsg$alg(r7, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x10}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={r8, 0x0, 0x30}, 0xc) executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="05130f000184a89196091503d00000"]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000290000000400000004000000000200001400000000000000290000003400"/48], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38193e6cd5271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f9561bcbb3a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0xaea7, 0x6, 0x4, 0x0, [0x0, 0x0], [0xd, 0x6, 0x9, 0x7fff], [0x627aee87, 0xda44, 0x2, 0x1], [0x1, 0xe, 0x7]}) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000380)={r13, 0x3, 0x1000, 0x0, 0x0, [0x0], [0x6, 0x20, 0x0, 0x8], [0x3, 0x6, 0x100, 0xd], [0x1000010000000, 0x0, 0x7effffffffffffff, 0x2000000000000008]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r14], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000680)={r6, 0x6, 0x1, 0x3, 0x1, [r7, r8, r9, r14], [0x7, 0xd, 0xc48, 0x4], [0x8, 0x2, 0x1, 0x5], [0x3, 0xb, 0x4, 0x7]}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29, 14, 29, 30, 8, 9, 9, 2] detailed listing: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0], 0x254}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4", 0x31) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000480)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x34) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) (async) sendmmsg$alg(r7, &(0x7f0000002cc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="60cc3d598973eabae91aed747f69b97cc87631e40a5bd6cd997b434dcf970acdd4ba9aa2870f376f9e719e8864c333b0e8f86eef575594bff18045044e1c6187bb4d3b073491d419d6638a53a5ee65ea9dfc48344fd51d3bd6a5a31cb5a1627fb8ba32819160386ae160a0a91897ad62e4790bf526cdf6c43c168a8ebe67e87c97887044ee68ba834f1907429b8d1bcbdc3a2801960d77c6", 0x98}, {&(0x7f0000000340)="e233eed8a16aefd246546c2ceaeaa5347f2d40ef75a114850948267cfc37462688f268e8a1ba7100fa4ce403f1f87a69d7945ee396cafd60514fd76e42f59dcb617bc15a32ebef7bacae351aa2531703b69caf8c1cda0acc614e4b3357b6889db523ad8cd1ef1f2e", 0x68}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x10}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={r8, 0x0, 0x30}, 0xc) executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="05130f000184a89196091503d00000"]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000290000000400000004000000000200001400000000000000290000003400"/48], 0x30}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38193e6cd5271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f9561bcbb3a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0xaea7, 0x6, 0x4, 0x0, [0x0, 0x0], [0xd, 0x6, 0x9, 0x7fff], [0x627aee87, 0xda44, 0x2, 0x1], [0x1, 0xe, 0x7]}) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r11, 0xc06864ce, &(0x7f0000000380)={r13, 0x3, 0x1000, 0x0, 0x0, [0x0], [0x6, 0x20, 0x0, 0x8], [0x3, 0x6, 0x100, 0xd], [0x1000010000000, 0x0, 0x7effffffffffffff, 0x2000000000000008]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r14], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000680)={r6, 0x6, 0x1, 0x3, 0x1, [r7, r8, r9, r14], [0x7, 0xd, 0xc48, 0x4], [0x8, 0x2, 0x1, 0x5], [0x3, 0xb, 0x4, 0x7]}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbde}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash bisect: split chunks (needed=true): <8>, <7> bisect: split chunk #0 of len 8 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8, 9, 9, 4, 2, 30, 5, 29, 6, 4, 1] detailed listing: executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpgid(0xffffffffffffffff) syz_pidfd_open(r1, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 3: syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$alg(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="4b01aa001765473c2588371cf7fd60b2fe21c73719a1b9935169a6109eb0f52caea953fb36dfcde7be332f1080ed46488630be56afcc26f0a07535c0541f8331df1b37633b3bd386d9ba0d42303e5a0c77cc99bc34fb45f4f67039681112e5b4f3501ee8d7f9719f42d9b7dcfacafa", 0x6f}], 0x1, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xc8, 0x117, 0x2, 0xb2, "4da83ca7e79d78d10c3714ec85cf3fc38a2a2c8a53a80ec7cc63895a5d5b71bd9e13dc1d1ea4005f03cfdc866bd631d2475dbb6b5ef20c460c83c571c3508e127657dce331c7c92818111f500bc8b80541b9e92f9c2cd5a96ee51d032cab64b2ca681635f0cceb1908ae9c7d4814699892e4e4df58d0b4417e0b2e6edafa48cd4b43f626b7751ccdef02f04ca866af0881d4a00d2c9fcd97a2def8f42d7e62c32617721ea31e60f5409fb2df5d06574b5613"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb6, "153f1d92391c763b2d3ae62061701de2cbe73246a2fc9177f753f063a872e26099e7476742b66ba51ef8e313b145b8d8a6beec0018273583b689a8506fcb72b992a8e1e1fc5374527249b2d5ef96d3dccd7f45aa24e6cc244f0fa8795e466c9c7ccfc60759d23bb104780eb2ec7e6d1c12566871641467464e9bd8111d923e720d39edea48580e020c68a2a31bd2f6dbb97fe7e9fd68ca32943a1db16b68080621f3c98498c729929c1c9ae9be3abe2768b35aa4e939"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x258, 0x8000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="00cb17d98a1c96f54efd4ffd2227726f0b5d70edb770b322ecc90d90fd9b1e023580016f7bd7e931b543a764860eca77259f219bb170ad86a9ff56cb1e89b8c5affb0d1beb94fc3c566b621b1dfa302f6f6b2a33ae6ff4b3a262c93a1a793ba1dab9ab5c7b44ceee10c15b99b30f858cd4bf4c574604a4cff0d69f89c8695fcfd181728834a692cce3b50acd36180953cb84def4", 0x94}], 0x1, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000170100000400000042000000000000001800000000000000170100000400000006000000000000001800000000000000170100000300000000000000000000001810000000000000170100000200000000100000f30cc807b33dcb434119963323a920b2947e2916f8fba6b63eb34f401becdf2eefa505b729c0f2f45f1e8ec5bf33356c907b5124f556653d6eba3a3fea1e3d8e04ee1e31d5bb817d24ee18272c9bc731a1b49b9dbf8201a8f3e217cd1aae9b63e518ef5db9d05893744b332123a6bee2402a9e1b6f103a55cea6a3eed7e3163f9a1966179e19935360b741026a85256fb47da4716e6c6cdfa79664fcc5cc46ce0ed5602c5e048ff08ba229dc230305f916ee5eaed22f504b218e98d1035709dacc5899a83204026fad7f357c6817dc64db8c11f4a142e39fdc1c118d2e35569f0887f109eef8adb66f8db22d53d3ed981e4b4ff5c71556eb6246f21127d38b791019df5871696f2a9ca62a10085e164415e00de12fe9c182cce96905fe9562b25b766026696c4d1800f1893ed6eec9acae3550299df5e542040798ec0c2ccfb13c5682abf731086ab67d6c27bd583a50e56c6082453d01cf19fc0036ba6a0dd46b8e9fe3f6cd840e10958533a0118a54e2cd02ecc58303edce92fd9e8a2caddfd609af37e298a3d77268906128960a7ef2f4be4f51bf81170d95d696bd1961694701ae14fdbe836cc5aee7ea7f17930eb2a3d62b43388fab8680f0272b21262d6c85fabb1ebfe7c1fe437a61df9355a5f8cf8e19a9a180da58de357924cc9dea2e52b2b0163cf4534c63c510e4fa53df57ce36ed170ae342b3ace41e906ff1e7c94dbbbb20fbc4c6e016e954db62ed05b4b2f39803cde5b3f98ab6ec6ca11225caa1b5cc2d862fc6269cda3fa5885ecc112a48e198f2a1f4abccd43e48a425e1b60100d40892043bd06dbc8917eb55a12a5111817404d4cb81144112655bae2e5cae7314c0118042e8af3023dfda1ca15394a497df9c84c3c15fd5a11f7f3f7afae8842bacb878620c5c58bcd1bf993e5a282ea58e48d61292ada77a8066250e6d1125930bd23da60526bd0231844b031de29f6d96ff66774edd7b01991a7a7927a10190fc9ccc03f7b9a114cee90366570ba169cc5915b567a1325245f6d2efbf5fe62c333df5e0919ae1a0fe493c5168d2c4201d821c9be9b05f8bdd2bc862b4b8fb95f2a6fa6fe4dc880822966907d627fc8dea7146e55578e7ecace53cba5e4d5a269d063c92332f071f034806edb1db96560f11250ce2372a0975fb276753023436d946a811815dfa2711363d432d06f7c8ea5f7d6681c27fe35ca36466ba0aa982eae32e7172ab2549717b9fc30e6a90a3fe82934d2c52b52fb9428c7718b3ba0e042cb584b44a9dac8fe82cedaf4a11222192fa7d6aa44964e8a171d594ddd326d696b28c90fed565d2bab60a7bce936bd10ca256a3055c786d3f59b691bcc6963b1b0d760dd4101b12236f5d46298dc614ff899b96f4582c417bc8da70074384026f30871df7035be84f74c5e47daf37ebb554037668309fb95fb3835317e7c2dfa1efe149d19bdea2703a7a068be43ece815281efd503b42948c3d58dd1e31a4dd2324529d0dac780028b3489ec6704c81ee0957168a82beca1333440648cac930364716fa8470f03c8da7f358af04b40bd885bbd657c8b97031e0791e8c118c3ae265d7c6b175b454aa91918aea2ad4fcf9728fb299891eb83a06965c436be292d48b9ea07915bb7180f9ea260955301a52061518889e651b4cae2efaf1f1ab425cdcbeb262d614f3e439b26a55e472aab6133a1d1113ac181e813b9efe2547c514f8b06d3293c528ae0ad4b3654a533bfdfcfd6e276309b529e6945cb543a7f8d6295f7eeb12aebdab923029eacd1ccd981c235c57283c10d5ee2d60911ba0a285b5a29346b61240463d066f3857dc245183ebfc5d235f91dea611b071be0db9b85493a91ead19d2daf1be12e3baf7362879ae75b221fbd53f24a9470199b41bdff722f5208a67528f39b070485aa2faf9e4e22ce33253bcb2b8f383020e2f13a2c6d38456d9e21000af52e8d76ac890a947bd56457c4408105086773d540b38c61ca5703489bd9f1715245fb1a45cf4f392af115100756df7f63a1d6966f99a9b7a2be4cb09b1d8ff8f8e8e6770a79318b4f8e6a098a04b4a4fda5d028482b591cd4dfc61a82b66045f77d4992e0d60f9e7cddbc02e37edf01f861064559d2e944931a738f0519c73f4db457ed76cd790acd3a415299cb5caf4e00d6c582687f6511c10a2b453e7818d9b06a75e2c7ad7fff6085acd8a07ebaf58d2d89c099cfbc2512cfe1e559697a308ba9ce2fe065361b3e93bd2b4d66071f2224b33d1ea3e9a492ebb60a6e3218d6c743a8055096c075db5ff2c20628ac46b3eec7644b1e90e81fbeadd6957645311b1c6fef6444bc1c423cf997e7e4d597c611a7c37ebc4fbd4bb02cd8c6cbb68ef4ce779d5f9421d233ff2e353d0d25b1b7d2a7ad4834c0a9d2392513d0315fb5ed9121d72c210574073bd7479e3b9789e1aafe3bb99f8f08baa5c64fd5aecdbdac487d7718c28218fd7757050556caabbbb408bb0e1fc989836f17bafb8d7ea459f65946fef34a951ca35ae1bae4a92ffcd471a19b9a45f5f368a2a2d80ef8d6f35e1ef02dcab207e2d344ecc7278bd2c892bff133163886d28ac2ff62812b052ce2d2bc7f789f920888007c37f7d3c0fcdfe44dbc42fa2e09efbda90507890abecef67f17a0661e6a046f7818cd14efe0d8fdb22eacf1eaaa46c116c669f91339386c89aa645c50adf2f3a6f47fd7613936fc4a8aea8df7ad2d0e97c496ffb7c601c11b25055637196dcfe92cb8164aff0e69b95b5e0751253ca6a45d30a82db63c7cd75ce782e377065e60defbc197e50e741312588f3eba75daf847a930c517575788464d1a646c126906d0dab6353081893104798cd91b451331f777a910a6d6f9d70a4849bb9e94766d997bf01f7aef66f3f0b69509e1cd3f7771b3dc921574deead327ead360fdf2a7567c0c9ea71ba7494a499e92cdfd55fa4d0d1f091b5b739501d2931542d56d40df647a8c0b713ba5a5c40cb906988e194377448817e956b1c7c710346f5c898906b5558ae183505efe7db127299549adf031a7c45955bac45fadab5170561f6294815f8640c3f8055966896f1f8fd74d106fb0620b0766ddafc005cb8a6b585cfdccb522db7a3fdfbf0faae922d0783e1c458edd8da713ba501bd4e2b117feaccc0a775b1b7da0c7f5edd0a2a225ddf4d7242ddcb454fdd857ce75d27ab40dc1dd1d41f6d7bf1ad544960b661498eb30d28669ab03a81ee8c6264cc0d94a7a503e1c2860e24e83420bcbf11cf4c3a7469ff830deb19cc69215f62a9d44b815ddb3083dbd3d14b0988a622fa479264cc7552439b8e62593bf0ccc629b0a25025b5118b8dbbd24c9944ad1706532ce8f69ce5d08d38365b83a98ef59285d617a49feeda6415c888bf14c0cbc039d12fe6197fe8b49e8ff737e29b18494fb6e8211d57b036f571847eedb97347ddb325682e4bf878b69137f787ef8f992f7200b0f44e32fad42f0542320aaef0fbb47155e6387d773f0d2fa567f252e15ed9248910b30346fb58b59416641057e29722ec516c61db19487064a2b513d7e9496ccd173ae866612b19f88c2e5c522ff894bd157ddd408f898da40db9bcd25d4e48217e8e8d168ba6d627947ce7771fc7feed881e749df9c5e26e02a8eaf692353248641609016ed25b0d8eba434e4121eb15d87e3ce5415949cf6e6a5c79bb6e32d1da20c596a397056973999a57de11e56f9d2fb285fb1b7fb21c9fe86faabfac729e4be7d83c3e958a8f02df83bf69cd9ebfdda80bcb63b735f1836e01c008fb955dda49d32649049bec8c74452915069cf1ef4851fcacbae48c06fad7653497235e65f4c93fca4b8253c8ab1ff2b863a4f87886b469798a11bea30df5e6c44d11b13b811b8f74131f9d3314d57ab373f38c2b2f58ec4704fb9ef119276d548d5c347754d5e748c8d60b1b5c05d0d6ce3dc402411926d798e4f48c8b14f8e58e5499e0dffb082377899508684f0f54c229e5c77c65e0fcd28b2951bb02889fb2cbbe3f843655c3d261bcefa30518e0047fbab6e3d446aeafd08a66076af981fe08f7ac8daa513306ae18cf10bdc34a11300a40bb85d1258591dbe85597fc75c6f9416fb5b0bae35fa07edbb1b7abe52406622159d2e1f897b6e9e1aca3df40b7a8cf43a98bdd066d3fdc247da59434d570f79175c8457f84f558a2a634f7794acbae8d6cf4243e14c63131c8631cfe2b24092ef33cff9b5de511496b30e61a5d0383d2dc9c7cf228aee28a7337c706aa5681a9f02fab76bbf5aab58c548c52d4915b4c5224da70b5e2b51248f6ea82bcaba82cf00b671f3040c58aa48b87e187b27bf6fd15482c29daef937d86c97a3b648d17581ef837c8ef7bf7e9b72823ede2ecf91e67ce9690f8ef39b99d99bb8c0438100aad7ed6387516d0b79c5e75bd2bbaa32d550f50a73c0ed6b837538e4f1376c4fd0d23eed70467c5a17dfc0b6b9fce8757372cb74d1a0eb35f755ffb635f07b60daf86ad41525959c243ecde3d982c7b22b8a53d0626712d3ffdd5ba668016fc28ead526d5db9a289e3913d706af91cd38196f4ae9088ee30a7446dce8d7fb6103581fa3e0316629a16312c960b97ff1072f6b8525dcf7f0dd1a9aa3a91cd13bdea80034282a22408c4340c2abf820db7d2668a01298722efaa56992efd670939e5ed1855541f9afe9ae2b71a61b119cf63fd5a2a18419609aa733fb86802af2ab668ec24dd87ded99644b068beca01e22d7830b47562290cd647aac276a0e0c51fabec3922ff9f86116f22717b08b9ce5f1e637ac338072d698631ca3712dfbcc442c98359bb889fbb12ce1e2e8f456b005209b687c0cc014b0d2ce3541574aed48240f32666bb9c5e81512b7218e9bfc5373591efe320c6edb33f15df84f104f7967551d809c8898298fd3b35e3c94a67a2debc4eeaabae65173351700f04d43193ee4ecc4e0e47af6fa1dc62a47a111ce4b6f546f0d27d15d4836dfd2eac9d3e928034c0fce9494ac6b424c68507ac7bbbe7d73f44eaff6207826339399a693b2a5fda56b3b1853f22ea45e9e53dd97c28cf65b8683b203069c46a5bf4a14d9e5cb2397c2dd74a180b190ff0a53079f2858b7612052e125507ae55d1d96a03dce5e4f00f21baee559b75f3d72a660312c6b74b6574232ef4b99bec2bfed7ba85d11268861ce34fe6e79facf1f682b1104705663253f3600b53b58466ff04c65b83cf98ae463f6873cd4b0a1123a65b2abdec4f811a025576f939116ff3199396b39bbde35cef998bd50e11d089b6c654eda0e811c6744cffba7cee73a132991ca6904e02cb45c38d26cdec4e59847846fc08bfeeb883069dae26d6cdde05550a87b8cb1adb8df7bce2b85defc5e0d8279163e39cd3cfe927a66c1d2536479659cd284491e2cdcd919f78ed5d550c1bff30d9ef6344e459caacf078c59ff6735a7667d27c1b0252525c00d0015b04144457ae1008fb3aa9f3c345abdd04621afaf6c70e19370ef34662316ed8de903c6a67e60d7731106444efca725ae1644bf12b1c0b6a0073bd10acd4fc9e45cd3ab8dffc2aa91d268dc3269f07afa121391afd6be3ee102d89a4bcbb744f68e1323e8c3845fad75315b01e8fc1abf2e9c60717f70f4f21a013c5986bb41a28c278b1fa2e5ff5ea8a591fbc9f4624b0467b091e71faa49965305ecdd9aa7db80d32ec265c180fcfcc90d0ba0a2202c20858fb86ef2f26aa54e287eeda98eeb79eca8c3f18a8af3aa27baafcf797e1e0c9d86e9de33bec645c518124e2a100ef80af393800000000"], 0x1060, 0x4004}], 0x2, 0x894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2e, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x100000000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000004c0)=0x5, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70000000000000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x120}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) geteuid() socket$rds(0x15, 0x5, 0x0) executing program 1: r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200823, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0xb6, 0x20000000000004) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x101}) executing program 2: mkdir(&(0x7f0000000440)='./file1\x00', 0x180) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000d40), 0x0, 0x40000) mount(0x0, &(0x7f0000000e00)='./file1/file0\x00', &(0x7f0000000300)='nfs\x00', 0x1001468, &(0x7f0000000e40)='usrquota') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f677874656e562c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x14, {0x2, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f00000002c0)="0300d3", 0x3}}, 0x8851) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000001440)={'veth1_macvtap\x00', &(0x7f0000000800)=@ethtool_perm_addr={0x20, 0x122, "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"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f0000000500)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x82000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1a1000, 0xcc) fchown(r6, 0xee01, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x4000, 0x179) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0xa}, 0x4, 0x1, &(0x7f0000000580)="c02c5655afd31f291bce63d32ef689c1608b8117a6485ba8e890660119862e2e5cd64dc84991d6e4dbdae61356625f298e063c7ce6cf8c689fa0c4952349765c8b1f74640e7a7199b0c5f9808c8d2c9f2b263baef8bc2e8f0a2a06019873858807be5296a06cd3da8c03e4d1031422b3a8a976f1125875fbf7f62563f21e28a03f3cdcc7285582ee23cec2164c141915f061c7e03a7bd0af6831e1e18c2d8001beb87543a57b1969db797c4a44e7cb666e83736982f4", 0xb6, 0x200000, 0x2, 0x34, 0x401, 0x3, &(0x7f0000000640)="5fba92c2fa121b98f89df28b6f7795c19d7af3cdbd057f2759b1f69b162e461cab479a73e23ad17058d3d8b0f3a1a5d56710d0d33c36024b98cee762a2c91756fa4029cbf57a63dcdc8e2288046ff720387eb5371c8dd12e65369a82c2d2aec4f3adf76a7591ec447437e685b726ee5ee0d3c120f7fb1fff1956f9b40076739fc3a5fb233c31fbaff89ad890daa401bb70fa3bf9bf2d4c311b0a271fba4626adc44d796335c478c15c18d1e9e8e462a21a93da4ec76fb7adf137128248fa18a80cba1f95f05625bab3837a0bfcc1899193dfe40638ef640f70873a", [{0x2, 0x2, 0x4}, {0x0, 0xffffffff}, {0x6, 0x400, 0x7}, {0xf, 0x4, 0x9}, {0x8001, 0xfffffff4, 0x7}, {0x100, 0xfff, 0x101}, {0xfffffff7, 0xc4, 0xf}, {0x6, 0x8}, {0x0, 0xe}, {0x1, 0x7f, 0x9}, {0x401, 0x6, 0x15}, {0x7fffffff, 0x1, 0x3}, {0x5, 0x7, 0x5}, {0x6, 0x3, 0x9}, {0x8000, 0x7fff, 0xf}, {0x0, 0x6, 0x10000}, {0x6, 0x6, 0x400}, {0x7, 0x1, 0x1}, {0x8001, 0xffff, 0x7}, {0x10001, 0x17, 0x80000001}, {0x4, 0x1, 0x6}, {0x8, 0x7, 0x80000000}, {0x548b, 0x5, 0x9}, {0x0, 0x5, 0x36}, {0x4c3f, 0x0, 0x7ff}, {0x400, 0x100, 0x7fff}, {0x8000, 0x5, 0x6}, {0x3ff, 0x8, 0x8}, {0x4, 0x4, 0x1ff}, {0xaaf, 0xfffffffe, 0x2}, {0x0, 0x9, 0x8}, {0x5, 0x9}, {0x3, 0x1000, 0x6}, {0x6, 0x6, 0x1ff}, {0x4, 0x6, 0x28}, {0x5, 0x2c2, 0x8000}, {0x0, 0x5, 0x6}, {0xd4, 0x40, 0x80}, {0x1, 0x300000, 0xfffffffc}, {0x1c, 0x8, 0x7}, {0x7, 0x30e, 0x1}, {0x10000, 0x8, 0x7}, {0x9, 0xa0e7, 0x2}, {0x2, 0x1, 0x6}, {0x8, 0x7, 0x9}, {0xffffff06, 0x1, 0xffffff35}, {0x7, 0x7, 0xffffffff}, {0x8, 0x6, 0xc1d}, {0x5, 0x40100, 0x1b}, {0xf, 0x9}, {0x1, 0xff, 0x95}, {0x6, 0x6, 0x6}]}) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 8, 9, 9, 2, 6, 4, 1] detailed listing: executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000002540)='./file0\x00', &(0x7f00000025c0)={[&(0x7f0000002580)='$){@@+&(\x00']}, &(0x7f00000027c0)={[&(0x7f0000002600)='\x00', &(0x7f0000002640)='`\x00', &(0x7f0000002680)='&\x00', &(0x7f00000026c0)='},^)]\x00', &(0x7f0000002700)=')*][+\xa4.\x8b$]*\x00', &(0x7f0000002740)='}*%)[-\x00', &(0x7f0000002780)=':\x00']}) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f3f00000008000300a7ffef7f935ec099ad35864d01a7d26df15f34eb446d2a3a0d0bd1e8e3e0ea41f41c1cf62a8925cfac065b27447e00650e7d20b5d7f7b91748470ad826a74608951c34ac24762414839825e45f17ada70ab050ca369b526f2535a27aa12e6d3d2c07941aa403", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'pim6reg1\x00', @ifru_ivalue=0x2}) ioctl$sock_netdev_private(r2, 0x8948, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r7, 0x0, 0x5, 0x0, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x3, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xe8200, 0x0) ioctl$TIOCSSOFTCAR(r12, 0x5412, &(0x7f00000001c0)=0x11) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) r13 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r13, &(0x7f00000003c0)="724efba2b7761b6c6f29da04a2354ba8676e194e6fccc08dc7d7d05d9b34f8c1a65dea1ebfda6c4fd8d34b20e9f95aba386a00898748d761253e457dd5a61c1506f463da548aac41d32be6e79498074246200a1dce901828dde845db7c3610873f433d6274109ac717df57ac1259a0d2db02fa3ae232041a2c89cc3f9f2c8c1cf828fff9589556b078ab8e5de38910b74eebd649005751abfb9634f4039211f0a8381c8b0db1a4535750d33bf9ef4e60b4880ce73315ed4dfeea90397350edf6438ee59a8bda05817c9a864f35886021599c92e89b5cd814a537f882e56acc7884b1c59be60d4b6479d5", 0xea, 0x4004c00, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) listen(r1, 0xfffffc01) executing program 3: r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <4>, <3> bisect: split chunk #0 of len 4 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 2, 6, 4, 1] detailed listing: executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8a240, 0x0) (rerun: 32) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0xfffffffffffffd41) executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 86) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 2, 1] detailed listing: executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x8, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x44854) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <2>, <1> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 2, 1] detailed listing: executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunks (needed=true): <1>, <1, final> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 1] detailed listing: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e640f01dfba4000ed0ef30f21e6c7370f080fc7310f00d22e0f8cff00b8ce0f8ec00fa2", 0x24}], 0x1, 0x24, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2, 1] detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks minimized 9 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 1] detailed listing: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 1] detailed listing: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks minimized 2 calls -> 1 calls minimizing program #2 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1, 0] detailed listing: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) executing program 0: syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) executing program 0: program crashed: WARNING in drm_atomic_helper_wait_for_vblanks minimized 1 calls -> 0 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks bisect: concatenation succeeded found reproducer with 5 syscalls minimizing guilty program testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(0x0, 0x2, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri program did not crash simplifying guilty program options testing program (duration=58.276372288s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: SYZFAIL: failed to recv rpc a never seen crash title: SYZFAIL: failed to recv rpc, ignore testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks extracting C reproducer testing compiled C program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri program did not crash testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks validation run: crashed=true testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks validation run: crashed=true testing program (duration=58.276372288s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_VCPU-ioctl$KVM_RUN-syz_open_dev$dri detailed listing: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 85) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) program crashed: WARNING in drm_atomic_helper_wait_for_vblanks validation run: crashed=true reproducing took 2h24m49.295367285s repro crashed as (corrupted=false): ------------[ cut here ]------------ [CRTC:37:crtc-0] vblank wait timed out WARNING: drivers/gpu/drm/drm_atomic_helper.c:1844 at 0x0, CPU#3: syz.0.33/6143 Modules linked in: CPU: 3 UID: 0 PID: 6143 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 drivers/gpu/drm/drm_atomic_helper.c:1844 Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d d0 d5 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 1b 27 67 fc e9 81 fe ff ff e8 a1 RSP: 0018:ffffc90003fc77b0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11020b60023 RDX: ffff8881037eb860 RSI: 0000000000000025 RDI: ffffffff90929260 RBP: ffff888105b00040 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: ffff888028f5d4b0 R12: dffffc0000000000 R13: ffff888024b40e00 R14: 0000000000000000 R15: 0000000000000000 FS: 0000555589c49500(0000) GS:ffff8880d6bfd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6e38fc1f98 CR3: 00000000380b2000 CR4: 0000000000352ef0 Call Trace: drm_atomic_helper_wait_for_vblanks drivers/gpu/drm/drm_atomic_helper.c:1818 [inline] drm_atomic_helper_commit_tail+0xaa/0xd0 drivers/gpu/drm/drm_atomic_helper.c:1920 commit_tail+0x334/0x410 drivers/gpu/drm/drm_atomic_helper.c:1997 drm_atomic_helper_commit+0x300/0x380 drivers/gpu/drm/drm_atomic_helper.c:2235 drm_atomic_commit+0x234/0x300 drivers/gpu/drm/drm_atomic.c:1743 drm_client_modeset_commit_atomic+0x69d/0x7e0 drivers/gpu/drm/drm_client_modeset.c:1103 drm_client_modeset_commit_locked+0x14d/0x580 drivers/gpu/drm/drm_client_modeset.c:1206 drm_client_modeset_commit+0x4f/0x80 drivers/gpu/drm/drm_client_modeset.c:1232 __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 drivers/gpu/drm/drm_fb_helper.c:235 __drm_fb_helper_restore_fbdev_mode_unlocked drivers/gpu/drm/drm_fb_helper.c:266 [inline] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 drivers/gpu/drm/drm_fb_helper.c:266 drm_fbdev_client_restore+0x1b/0x30 drivers/gpu/drm/clients/drm_fbdev_client.c:45 drm_client_dev_restore+0x200/0x2a0 drivers/gpu/drm/drm_client_event.c:118 drm_lastclose drivers/gpu/drm/drm_file.c:408 [inline] drm_release+0x2c6/0x360 drivers/gpu/drm/drm_file.c:441 __fput+0x402/0xb70 fs/file_table.c:468 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0xfb/0x540 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6e3818f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff40d56468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 0000000000010de4 RCX: 00007f6e3818f7c9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f6e383e7da0 R08: 0000000000000001 R09: 0000000540d5675f R10: 0000001b2d720000 R11: 0000000000000246 R12: 00007f6e383e5fac R13: 00007f6e383e5fa0 R14: ffffffffffffffff R15: 00007fff40d56580 ---------------- Code disassembly (best guess), 5 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: f9 stc 4: 48 c1 e9 03 shr $0x3,%rcx 8: 0f b6 04 01 movzbl (%rcx,%rax,1),%eax c: 84 c0 test %al,%al e: 74 08 je 0x18 10: 3c 03 cmp $0x3,%al 12: 0f 8e 3f 01 00 00 jle 0x157 18: 48 8d 3d d0 d5 3a 0b lea 0xb3ad5d0(%rip),%rdi # 0xb3ad5ef 1f: 8b b5 d8 00 00 00 mov 0xd8(%rbp),%esi * 25: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2a: e9 ed fc ff ff jmp 0xfffffd1c 2f: e8 1b 27 67 fc call 0xfc67274f 34: e9 81 fe ff ff jmp 0xfffffeba 39: e8 .byte 0xe8 3a: a1 .byte 0xa1 final repro crashed as (corrupted=false): ------------[ cut here ]------------ [CRTC:37:crtc-0] vblank wait timed out WARNING: drivers/gpu/drm/drm_atomic_helper.c:1844 at 0x0, CPU#3: syz.0.33/6143 Modules linked in: CPU: 3 UID: 0 PID: 6143 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x766/0x8c0 drivers/gpu/drm/drm_atomic_helper.c:1844 Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 3f 01 00 00 48 8d 3d d0 d5 3a 0b 8b b5 d8 00 00 00 <67> 48 0f b9 3a e9 ed fc ff ff e8 1b 27 67 fc e9 81 fe ff ff e8 a1 RSP: 0018:ffffc90003fc77b0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff11020b60023 RDX: ffff8881037eb860 RSI: 0000000000000025 RDI: ffffffff90929260 RBP: ffff888105b00040 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: ffff888028f5d4b0 R12: dffffc0000000000 R13: ffff888024b40e00 R14: 0000000000000000 R15: 0000000000000000 FS: 0000555589c49500(0000) GS:ffff8880d6bfd000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6e38fc1f98 CR3: 00000000380b2000 CR4: 0000000000352ef0 Call Trace: drm_atomic_helper_wait_for_vblanks drivers/gpu/drm/drm_atomic_helper.c:1818 [inline] drm_atomic_helper_commit_tail+0xaa/0xd0 drivers/gpu/drm/drm_atomic_helper.c:1920 commit_tail+0x334/0x410 drivers/gpu/drm/drm_atomic_helper.c:1997 drm_atomic_helper_commit+0x300/0x380 drivers/gpu/drm/drm_atomic_helper.c:2235 drm_atomic_commit+0x234/0x300 drivers/gpu/drm/drm_atomic.c:1743 drm_client_modeset_commit_atomic+0x69d/0x7e0 drivers/gpu/drm/drm_client_modeset.c:1103 drm_client_modeset_commit_locked+0x14d/0x580 drivers/gpu/drm/drm_client_modeset.c:1206 drm_client_modeset_commit+0x4f/0x80 drivers/gpu/drm/drm_client_modeset.c:1232 __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 drivers/gpu/drm/drm_fb_helper.c:235 __drm_fb_helper_restore_fbdev_mode_unlocked drivers/gpu/drm/drm_fb_helper.c:266 [inline] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 drivers/gpu/drm/drm_fb_helper.c:266 drm_fbdev_client_restore+0x1b/0x30 drivers/gpu/drm/clients/drm_fbdev_client.c:45 drm_client_dev_restore+0x200/0x2a0 drivers/gpu/drm/drm_client_event.c:118 drm_lastclose drivers/gpu/drm/drm_file.c:408 [inline] drm_release+0x2c6/0x360 drivers/gpu/drm/drm_file.c:441 __fput+0x402/0xb70 fs/file_table.c:468 task_work_run+0x150/0x240 kernel/task_work.c:233 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] __exit_to_user_mode_loop kernel/entry/common.c:44 [inline] exit_to_user_mode_loop+0xfb/0x540 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x4ee/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6e3818f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff40d56468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 0000000000010de4 RCX: 00007f6e3818f7c9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f6e383e7da0 R08: 0000000000000001 R09: 0000000540d5675f R10: 0000001b2d720000 R11: 0000000000000246 R12: 00007f6e383e5fac R13: 00007f6e383e5fa0 R14: ffffffffffffffff R15: 00007fff40d56580 ---------------- Code disassembly (best guess), 5 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: f9 stc 4: 48 c1 e9 03 shr $0x3,%rcx 8: 0f b6 04 01 movzbl (%rcx,%rax,1),%eax c: 84 c0 test %al,%al e: 74 08 je 0x18 10: 3c 03 cmp $0x3,%al 12: 0f 8e 3f 01 00 00 jle 0x157 18: 48 8d 3d d0 d5 3a 0b lea 0xb3ad5d0(%rip),%rdi # 0xb3ad5ef 1f: 8b b5 d8 00 00 00 mov 0xd8(%rbp),%esi * 25: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2a: e9 ed fc ff ff jmp 0xfffffd1c 2f: e8 1b 27 67 fc call 0xfc67274f 34: e9 81 fe ff ff jmp 0xfffffeba 39: e8 .byte 0xe8 3a: a1 .byte 0xa1