Extracting prog: 44.121322339s Minimizing prog: 2h19m51.45812179s Simplifying prog options: 0s Extracting C: 1m10.394888529s Simplifying C: 11m44.386489513s extracting reproducer from 44 programs testing a last program of every proc single: executing 9 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program crashed: general protection fault in native_tss_update_io_bitmap single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)) (async) socket$inet_udp(0x2, 0x2, 0x0) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(0xffffffffffffffff, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r6, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r7) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r2}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) close(0xffffffffffffffff) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), 0xffffffffffffffff) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioperm(0x0, 0xfffc, 0x8005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311370000000000851000000200000085000000760000009500ec00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(0x0, 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="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"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r6 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r9, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r10, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r10) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r4 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(0x0, r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r7, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) (async) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{0x0}], 0x1) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x27092eee}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC, @ANYBLOB="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"]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', 0x0, &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="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"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', 0x0, 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB="1aeb3b817a8c08beee2ff875e4603eda254140949671eab04caa8365baab06e5484ddeff04bca2fd954eb97ea4d432a509f8c23a7fefe2e290266572887cf88f312e5d676f1327711e0f2f059f4763ef92a649230fd0d79b92ec8909703a1cbcd0a1095c27e793c339608dd1e4ad33983a1c0e0e55c471155ea6cbfc8ca252a73111a470ba280085c91c092cac3282469c73f22f183b1c94e1daafb5d2b65a9a2ab0a4bc59399038e62d635666ddc8a88ea1c7be7bf2a640e79a2275ea30716a0e6b8a11e49875dd5c8099b220f1402c64ee560f291de0cb6b16c3d57ef757c10a1a4103bd9ac5aa1637537ca048374e11ce9b3ae0133d77ef9484184a15596b2355ecf1fb13b70b604223f92814d1ac9a8def3f42bc6d4b44b6142159ab208ba2f8229ccff6c74a02d7c4cc82e9ac6bab8e34a6940fffe2493109dfe31704a97d8c4ba6"]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, 0x0) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[]) (async) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r8) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB, @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program did not crash testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r9) program crashed: general protection fault in native_tss_update_io_bitmap testing program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring detailed listing: executing program 0: ioperm(0xfffffffffffff2a4, 0x7, 0x7) sysfs$3(0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioperm(0x0, 0xfffc, 0x8005) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00'}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffffffffffff28, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x100000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r1) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x10000}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) (async) r5 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x100000}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000640)=""/144, 0x90}], 0x100000e0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8e383, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000400)='GPL\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80080, &(0x7f0000007f40)=ANY=[@ANYBLOB="277d5d23245c5bcd21232c002c61707072616973652c666f776e65723d", @ANYRESDEC=r8, @ANYBLOB]) (async) r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, r9) program did not crash extracting C reproducer testing compiled C program (duration=53.643419781s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap simplifying C reproducer testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program did not crash testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program did not crash testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap testing compiled C program (duration=53.643419781s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioperm-sysfs$3-syz_init_net_socket$bt_rfcomm-ioperm-bpf$PROG_LOAD-keyctl$update-ioctl$sock_SIOCGIFINDEX_80211-creat-close-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_GETRESOURCES-ioctl$DRM_IOCTL_MODE_GETCRTC-ioctl$DRM_IOCTL_MODE_GETFB2-mmap$binder-syz_genetlink_get_family_id$nl80211-bind$inet6-syz_open_dev$sndmidi-syz_io_uring_setup-syz_memcpy_off$IO_URING_METADATA_GENERIC-syz_io_uring_submit-io_uring_enter-readv-sendmsg$NFNL_MSG_CTHELPER_NEW-openat$sequencer2-lstat-socket$inet_udp-mount$nfs4-add_key$keyring-keyctl$KEYCTL_MOVE-add_key$keyring program crashed: general protection fault in native_tss_update_io_bitmap reproducing took 2h33m30.360852067s repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 UID: 0 PID: 5956 Comm: iou-sqp-5952 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:native_tss_update_io_bitmap+0x1f5/0x640 arch/x86/kernel/process.c:471 Code: ff df 48 89 44 24 50 42 80 3c 38 00 74 08 48 89 df e8 cf 75 c7 00 48 89 5c 24 58 4c 8b 2b 4c 89 f0 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ac 75 c7 00 49 8b 1e 4c 89 ef 48 RSP: 0018:ffffc9000430f280 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880b860a068 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffffc9000430f380 R08: ffffffff81620a34 R09: 1ffff110069f2000 R10: dffffc0000000000 R11: ffffed10069f2001 R12: 1ffff92000861e5c R13: 000000000000003b R14: 0000000000000000 R15: dffffc0000000000 FS: 000055558eddd380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b9c3c1250 CR3: 0000000034e4c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: task_update_io_bitmap+0xb8/0xf0 arch/x86/kernel/ioport.c:47 io_bitmap_exit+0x62/0xf0 arch/x86/kernel/ioport.c:57 exit_thread+0x76/0xa0 arch/x86/kernel/process.c:123 copy_process+0x277d/0x3cf0 kernel/fork.c:2638 create_io_thread+0x16a/0x1e0 kernel/fork.c:2746 create_io_worker+0x176/0x540 io_uring/io-wq.c:862 io_wq_create_worker io_uring/io-wq.c:332 [inline] io_wq_enqueue+0x7b5/0xa00 io_uring/io-wq.c:989 io_queue_iowq+0x433/0x670 io_uring/io_uring.c:542 io_submit_state_end io_uring/io_uring.c:2215 [inline] io_submit_sqes+0x1940/0x1cf0 io_uring/io_uring.c:2335 __io_sq_thread io_uring/sqpoll.c:189 [inline] io_sq_thread+0xc8c/0x1fd0 io_uring/sqpoll.c:312 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:native_tss_update_io_bitmap+0x1f5/0x640 arch/x86/kernel/process.c:471 Code: ff df 48 89 44 24 50 42 80 3c 38 00 74 08 48 89 df e8 cf 75 c7 00 48 89 5c 24 58 4c 8b 2b 4c 89 f0 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ac 75 c7 00 49 8b 1e 4c 89 ef 48 RSP: 0018:ffffc9000430f280 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880b860a068 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffffc9000430f380 R08: ffffffff81620a34 R09: 1ffff110069f2000 R10: dffffc0000000000 R11: ffffed10069f2001 R12: 1ffff92000861e5c R13: 000000000000003b R14: 0000000000000000 R15: dffffc0000000000 FS: 000055558eddd380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b9c3c1250 CR3: 0000000034e4c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: 44 24 50 rex.R and $0x50,%al 6: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) b: 74 08 je 0x15 d: 48 89 df mov %rbx,%rdi 10: e8 cf 75 c7 00 call 0xc775e4 15: 48 89 5c 24 58 mov %rbx,0x58(%rsp) 1a: 4c 8b 2b mov (%rbx),%r13 1d: 4c 89 f0 mov %r14,%rax 20: 48 c1 e8 03 shr $0x3,%rax 24: 48 89 44 24 48 mov %rax,0x48(%rsp) * 29: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) <-- trapping instruction 2e: 74 08 je 0x38 30: 4c 89 f7 mov %r14,%rdi 33: e8 ac 75 c7 00 call 0xc775e4 38: 49 8b 1e mov (%r14),%rbx 3b: 4c 89 ef mov %r13,%rdi 3e: 48 rex.W final repro crashed as (corrupted=false): Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 UID: 0 PID: 5956 Comm: iou-sqp-5952 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 RIP: 0010:native_tss_update_io_bitmap+0x1f5/0x640 arch/x86/kernel/process.c:471 Code: ff df 48 89 44 24 50 42 80 3c 38 00 74 08 48 89 df e8 cf 75 c7 00 48 89 5c 24 58 4c 8b 2b 4c 89 f0 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ac 75 c7 00 49 8b 1e 4c 89 ef 48 RSP: 0018:ffffc9000430f280 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880b860a068 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffffc9000430f380 R08: ffffffff81620a34 R09: 1ffff110069f2000 R10: dffffc0000000000 R11: ffffed10069f2001 R12: 1ffff92000861e5c R13: 000000000000003b R14: 0000000000000000 R15: dffffc0000000000 FS: 000055558eddd380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b9c3c1250 CR3: 0000000034e4c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: task_update_io_bitmap+0xb8/0xf0 arch/x86/kernel/ioport.c:47 io_bitmap_exit+0x62/0xf0 arch/x86/kernel/ioport.c:57 exit_thread+0x76/0xa0 arch/x86/kernel/process.c:123 copy_process+0x277d/0x3cf0 kernel/fork.c:2638 create_io_thread+0x16a/0x1e0 kernel/fork.c:2746 create_io_worker+0x176/0x540 io_uring/io-wq.c:862 io_wq_create_worker io_uring/io-wq.c:332 [inline] io_wq_enqueue+0x7b5/0xa00 io_uring/io-wq.c:989 io_queue_iowq+0x433/0x670 io_uring/io_uring.c:542 io_submit_state_end io_uring/io_uring.c:2215 [inline] io_submit_sqes+0x1940/0x1cf0 io_uring/io_uring.c:2335 __io_sq_thread io_uring/sqpoll.c:189 [inline] io_sq_thread+0xc8c/0x1fd0 io_uring/sqpoll.c:312 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:native_tss_update_io_bitmap+0x1f5/0x640 arch/x86/kernel/process.c:471 Code: ff df 48 89 44 24 50 42 80 3c 38 00 74 08 48 89 df e8 cf 75 c7 00 48 89 5c 24 58 4c 8b 2b 4c 89 f0 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ac 75 c7 00 49 8b 1e 4c 89 ef 48 RSP: 0018:ffffc9000430f280 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880b860a068 RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 RBP: ffffc9000430f380 R08: ffffffff81620a34 R09: 1ffff110069f2000 R10: dffffc0000000000 R11: ffffed10069f2001 R12: 1ffff92000861e5c R13: 000000000000003b R14: 0000000000000000 R15: dffffc0000000000 FS: 000055558eddd380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3b9c3c1250 CR3: 0000000034e4c000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: 44 24 50 rex.R and $0x50,%al 6: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) b: 74 08 je 0x15 d: 48 89 df mov %rbx,%rdi 10: e8 cf 75 c7 00 call 0xc775e4 15: 48 89 5c 24 58 mov %rbx,0x58(%rsp) 1a: 4c 8b 2b mov (%rbx),%r13 1d: 4c 89 f0 mov %r14,%rax 20: 48 c1 e8 03 shr $0x3,%rax 24: 48 89 44 24 48 mov %rax,0x48(%rsp) * 29: 42 80 3c 38 00 cmpb $0x0,(%rax,%r15,1) <-- trapping instruction 2e: 74 08 je 0x38 30: 4c 89 f7 mov %r14,%rdi 33: e8 ac 75 c7 00 call 0xc775e4 38: 49 8b 1e mov (%r14),%rbx 3b: 4c 89 ef mov %r13,%rdi 3e: 48 rex.W