ffffffffffffff, 0x28}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x10000, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x1) pkey_free(r2) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80400) 03:00:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000001) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000180), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x20, 0x0}, 0x8) capset(&(0x7f0000000680)={0x19980330}, &(0x7f00000006c0)={0x2, 0x3f, 0x7f, 0x2, 0x4, 0xd82}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=r2, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x3, 0x8, 0x50, @empty, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, 0x40, 0x20, 0x1, 0x8000}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in6=@loopback}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000200050000000800030008000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x40080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="f206192c06be011aeb1f727797613fec2aeb2f43abb4553e27ed7001b1e34dc2462b3ffc58cf6c838f4441333bf7d2d56cb81a2a08a4b965710270e49d05580edddfd68c3c4e7f59daf4cdab767fb0c917abbf376f055cc43a0e56b18f93161c39d3ce066ae73da7807ee23f845b34115a344d40b31a6499b6befc212ec978d67073fe7f1a7033a6397003366ec4e339cc828da9ffaa5fa6a15584d53b42a25f2a94a5c0e1343c1e46e1976dfdccaa27576be573a25ac8247be3090cbd3e3ba96fba0e9e260debb6dd43ad2eb0cd55df344324263d6e4499621ff117", 0xdc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dummy0\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0200d5743f4833326e23000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf25030000001400060076657468305f746f5f7465616d00000014000300ff020000000000000000000000000001080004000a010101050001000100000008000400ac1414bb1400030000000000000000000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x80, 0x1, 0x0, 0x8, 0xfffffffd, 0x9, 0x3, 0x9, 0xcf85}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)=0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x311000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x9, 0xffffffffffffffff) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x40000006) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@mmap='mmap'}, {@debug={'debug', 0x3d, 0xa5}}, {@cache_fscache='cache=fscache'}, {@access_any='access=any'}, {@aname={'aname', 0x3d, '/dev/nvram\x00'}}, {@version_L='version=9p2000.L'}, {@cache_fscache='cache=fscache'}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, '\xe5\xce'}}, {@smackfshat={'smackfshat', 0x3d, '%$\':&'}}, {@measure='measure'}]}}) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, r0) 03:00:07 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000003c0)={{r1}, 0x0, 0x8, @unused=[0x6, 0xffffffffffffffc1, 0x20, 0x7f], @name="e06a47a11e37a62ad83d986a2acb03e393306cadea5b3de085c47b7c707725284e29e346e83915a3c6610e12f871af8a4638ea863d313d15df08438b3a4d5849a0c8cf209be8651a4de2b1196976c978cf165c5193c4643d8f26f6a84de6e2805a9cb7e2bf4a7fb3ea0b78a1bcfa6133aa59f1b3285536208e8b4e000a3b6b442b3a04876531ea346d0a586df84c2ee1e881cf171eeb0b9b00c578f7ed0e330cfbf79e7a3591e2a497443daa3bcd846ce99082b5f3e90168e022de16dde318f8f06040a3ae1d0b165479dff5e7dcac7d13c786569566368f0a87f0d61b3aef7a0e29afe2f2a67204c001e260ff5d77ce282aef47977fdde688b89e2a5556b551846dd6b98a864d96e923447a56ded8fc03a536b1740c45847114ee3a6a3975985f85ac298e720c4a11f9751e5dc38355cef9c309a0dbffe5dec777380a7a467e2e80f0b49994029e23a0c7ca6c5db7559ce5556a10db38b2c4a5c3e58f86688600372fa200de4d06870fbb3e1935a0eb8ed459b1c6ab1dc6735afcee8e22bddd0c3586af8b7b66483dc05dcd316ef1ae42db9cf3b576bfcbc278ac5f0b1ff5c7f47a6a8defff6f4b566995092d13c4beac1e0ae94e4b7ab062b546c20cca6a71c7ad63feb84f104ffdab8f030cb26e2e7e18af92c9e0397a30cddb86a9d56078469618675475cc9a07be038690a7438280b5f9b4094e888bcbd6474910018a41d6fac657044d653348d54c6a52533adea3c3c5a3e66a8b9630f16af0723ae909adfaffca7cb7e4e520def71e5616e7fc6985b6e51e558ebc77fa0a7e2e9a1ede87b464742a9ca247cf922c01b446d71ff2057618dec4e2474b753da3dea45097c0e38674a1b70511ef5d0feeb1936afbb76de51afe3ebfd3cb028c2cb63e5eef15721a42eadb4fe328816df4603dac0416f6bbc4e0c9914651804b981b89b7917611fb38dc1b900dad739215d5d497c4de50cbfd51543dff724d11e3ef0f931e5a6401ca33ceff64bcda5702bd6dfd14cbb8608c54ee6f9eda4bab9a3e77f79968829f15c4b415a784893bd3d3d7b749fa16ad37535f10cd6080b5f095c4b33f791f2f2f46ebf21fd009818316956e74d158afba4005b5455626ec2a4d6a4b2b3ee36773c1f181df0f10e652cd1eb8fcd034509431b247ef6c10b513584591f6251867a98b905a4ebd5a5a0adca568460976fbfcf408832aff6dbd825769975b8cc8bf009e2c5acc6b90ef9381b6a0533cf695fb80e73b7625de977a27262bc9816396748c0b89d0cd4121e9f03a942ce8d87cbb1eeac12dab9fba776ea7bcdb8507ab5458e267b4e6184ab8f6d2de5377cc7c0c1314cd55b27159229c3e5b97fc0df3ccdc9f5bc40e2e8b2a1990fb22f3b415c876509472bfb8c9e5247a4b0a495268ec08ba37ac5f3819dd08302639750576558b847fd71f30e847f3c89fabc364a49d36c2ab6736f689e2035982605d84087d7bc09c54d417cb8e4d80073521355767095055b3f0e52af8dcbb98ca43ee763153fa6bb1adeb968f282d97ff92e99ca40afd4d4ead6f9746ba9cc711ab1fcd70f7131c252504a36b0c67e63f41d0cd0049593ccb004cd810d591473a1f516ba56b2ac28bbdd68061ce6ac04e4e3bc111b365cc5c551cfced900f23954e3749b5c91bc701cad7c04f840e181be14d4da657c03190c0d8a06fbd46c6aee1fb1f89183b2ab32a23bc295c46699f37fd411ec31825bdb3c15f0ab506391204e228f10b9b7326c79a5a4269777f10940ef600a3c534bcf42cac2a23d17f6100041648b59900882daad13466bfc19d4b703d52701c912d4bb146be1b8a8d7dfc8e62f6f273c11db447d979f19778dcc55f4f3b4c7a25592f2c1a88fc4b95d2ee82c1ac5678ef2ffe9c7f6970d455014de3033be668a1f03be9bf6967df7691154020ef041bcbadce625f2c0a6edb4131da4f135ce933ec2ea788ba007adbb898f18a0e05ff9e92f2ec76257b21bd861e87c52c96ed09d29ba3284d80866791829ed0f2c4fa54386d0b305533210548adb5e0d5462369855c25e19cf4ec552192dd4942aedaea31fe7e5af7d954a15277a0fcbdb6730795431ab73ddffc9aa695ccf9c105ff8f4a9b4a3b8630e0cfbb769b56b4fc946c4068e8844b7dfea368e910ca15eb65f3df5bafa31bd1e0ad0469ab596f2b1d4de7a17862c70645133869c77d51673d72439ea4d3e3fc7622898bf05b3e964d38d04c4072f209ecb96c91da27c58ce0ede411f8113f034755df24566ec9668d254e6818798799960dca06c3388ec06540c1212330b232068b39f5b9dd57b1b08201a4584563868cce39c63958cad4f93e0703f935d53b08b0fdedef59945f5ab28f781ce553e114ec017495b81927029fb7bd3232517a1885fa7a1e43daf0114901a70451ebf1fb33b0687b26d8e962488f8aff90ed03db2c96f160dd929beaa6eb7dd68e3089218ec1a4e24568e778ffc46bc47c85a89f4ae8e256deac27d15ce4679838cc9554761ef3bf511fd0c495371728370859951a84b637b722d51df5b4b8fc1e6061978e8e00883572aa56d1780b5da1bf0e70e44a36abe541698dfb2505fdae88e93688276cb4e166da0974ff6aa683db6989fd4e7a88dbcb8bc09de110be22351082a956e33b9f2462671652f9394cdf475b33583b4416a9ab51928b7268e24c3dbf8488c757afd0cb73ce37497dd137fafe6994991575a445f9536d331e813221d0da9f80af9caf0c4e8ab12bf7855527371539e477d09e81c9f2daa07c9c9a31f0a99b3a9b0d47f5bbbf176407315b59cc3c658ab88e83c21c4e763612b99168df93c4887c6fe2913a7d98d8f3fc095146a7ad48690fdc55f14a9b679412fc0c1030cd87b249a2a77b0ac9ef98ed6bee9a9d24d4d49597433949f15cf9c42cf5afb7ac62ff7966fcc04ef33213f3f7b503e9052efd46ebe6b1eb1592c29b81bba9177917306cea41f9d896704083df69b9f2fec3c268defa4649dce7eff100d90df2e65e449dc7307fa0f991b4daf315bd8712023dabcb41b04fb7cb5b0153255a949d20b8957ee71e953130464bdfc25f4910782396451d03441a78bb70da24b46afa6fc1db018432dd6566455d847977affff5ee78023d329cf2c9a47f1eec34011cfd1d069104c28a14fed02ecea0bd2a9f5518f2bff878bd6370aa6bb7e82806039fe382627d002452706ce8f59918dd81b4e110ce3d44caf5b4bd46de1d3d471b42018237def4a908ce9ae58d14920aabebca8d39b4f07db2ce4183df66224b059ffbac7ff98cc9d4f1ece7c7072146a90d3f921451a3accbcac1437d1843c48ee873652e64e57657d90e4844210691fad0f5dd94bc9ddd3f2fa80d1933dfd8e5be14e239a2907d60041ff84b96f392a81e166773e4263359f5af143c8ba44c879b37af552112295a156c1a0fc409a4ca4805f9ff0be2439a2edece34154b87b5c45a89704f9203afc1fc96da642202e5834a8c66c22214ee24897b6e0723ce933a9512db6a5385952c1684c679208d3c6113c7b2e2974dfd7ce01c6c8e2545f2f605e8be33c6b006e141e266b652bc9f181487c85cd06e5871f29e0ac573b75d3050901d1cc7f5f5ed39136e1533762c93139f0401d1cf49846a34167dbe2e4546f81282f57308e2ba009cdcaba387d6bd2d7e6e9b4803ffe6ab7d4fa69be6ce257c22234fce3b84bfc7cb94c3c0f10cf7f84fba1faf81deebeb0b555452d419ac1a98840fc767cdd71d14fbb4d103acb953ab2572ec82da5ac84bedfb4da0f4a7977c6433321a666ce8a7c93f75aa7a84e12395070d27bb1db0edd6b8db83bcfbb5ef3af9e479b4dbb2be38ee084a4a772d3884b7986eea9eb3fc70e75608612a2011bde6631ba6a2fe7c912c8e35d0d0e561548cb90b50f12d69aa210dbdadf5f792aed077c87e43c7bfdfcbd835be158d4b06c177e028c2511c061a204d2b60f4160cfb3a35d49dce7718817573ad4ca853ce4fb9b9be9a6c5700a3164f744a9aa4a4c68ce5cd1ab339d5d3a85d835e39b80afbb2d7788c25b88505b2a626b94090fc6fc09b736ccfa01768831c9aaf364a5f6819c3ef4106a5e8d20bdc340e792f2eafc8b84f79d17820e75ffdbfe33a534c748d79360e5bfc7a1dffd6a3a765d2a5b13cc173c74190530f41f7ad3439accd07dffee427af65c00d030392eee90f887a7e6401c966f40edd4ad654b1d849acd8d623a85ce8ccf218c6ed085f5a66db1535f9730996fe93647aff27779193f5e419bc1055b73a08357815d1077f3b8267b51420bd0c3c2eb3c6d806b3eff69e911311f75d12fcd52b528dfa189ffe9a98c426a125592b80281c05d076ed5bd92e1028595d193c7e3b5009ad435f84bd21d44fe5d51f33d1203053b088114c873c148961ad371fc8fa199a548847f7ebd0abb8b8b96e8b6ed7c251bf3b4008ecccdd180c650bd9668a20e14cea405367265d0fb1285574ba1c49386f47ae7d31ff7e123cb9ade7f6de15a544b8f5bd48c07d6f3336ab38a81ea5d694d126d46eedb53ca71f459137eef50f1d2a565dfb9c4264bdabf2442980fe10fa8b3ea42f38fb5c50edd5bb4960b163826e495c59733fa4fbc670e380c31c73a65c0b7fd9c89710533c5584f9e0046fa7bef4f5c728fe7f28f9fc807a7de0f29ab22b1443908f7031d0aae3f50a3782d3bba32aef820ac8ecaa1b4aeadd759d05275023b53207afc45421c913d7317d30f088ab413c4ab6cb58daaa680c7120d993a4b310772c2541133fc954dfdede49a71ac01cfe0492cd286d17eba030d7afe1d44db962b0d47b0ad575a58e24eeb1b3514d042602b2b5dadc235bdbfece2df53d0ea320e01ca91d805517d16cbd8209ec5244bde44b2cf0f383bb9e3b99037d70ffb8fa98f5fc58ee303d5ac5cc8fd56122432e8928a876bf5cfabb0a8fbf5375b5c5156031a5c451db16355c331e74bb6c54f7f04ad52166f5a2a85e7147bdc296d1e6ec75b357c2eb01809abf1a0c2fb03115890bd794cca8943bd8b2a3e06ac2fca726e3a7d85fbc8e7e8173e183c1b38fc1f4903a97c5b9c040e08c33ab054f02c6a6b324d5760e62b1cb7efc5f8d2c38eb2b7bb95b53b42d8dd758f4c1847e8f5af95a0b8293e3e0e022422759cf271ac58b4de24d4f6d7d1ab7e491389eb8513010fcefdf2543423e2d2aef4edf6ee67d8952f9d435569ec294f5649e0e2b7c144f5c10ce175b5fabe4ac118c79fb307870c5f1c951527548251d459356738e594746f96410bb7ed5388f224a745ccf64b351af6be45c0800ab8507d0de4eef2046958eb35025e71a9c577a00a7dcdc2324115afa390cf7606dcb7accf2ec6cd20a2d0483095dd3b84da2293c7a0a564e5620ac5e8f6a0aa7572f9041e09e9ee651312a1c260497894af5dcfa3e655e3e0be48f991c883d8d8e7bfe1f28f0ec8b1e457e0f520e1a72a463fa7d085fc3426ba27995b9f7d17f2471db07df67f5d0fb7eb70fe04d9531fc7e16e8b64ba68dda225408030d60c0d3bcf4536e12b7aa36bd1e8d304577b59c8ba034628e3a5cf8fda60b2a0f20b8dc3351407295a1ee2d4ea61b9d492ecf3fc5e6ed495068c6ca1ab4ea797f67d0cbbe3fb64089735d9db1d93092a53154276ec56053727293ec156f677bfc5baeace871f6982dbf80382f5b85e089eb2dee5d38591de275f1d2fc706ad7ab01e5e9ca4cb80f4afcbc40ce2f"}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x212200) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={0x0, 0x0, 0x7, 0xffff, 0x8, 0x7f, 0x7fffffff, 0xe0, 0x3, 0x81, 0x4, 0x4}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/19) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x80800) socket$inet6(0xa, 0xa, 0x6) accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = accept$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x59dd) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000180)={'team0\x00'}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000007c0)={0x582a}, 0x4) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) r1 = socket$netlink(0x10, 0x3, 0x8) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000f5ff", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdba913d6e7a5576d5f753a6f626a6563745f723a636865636b706f080000000000009f0e0000000001010096fcc2b3b22382abc6ee752850f187ea6017f2e6d9f9075a9981b4f558b8d4a76297f4812a64b8e6"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x0) 03:00:07 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x7, r0) pkey_alloc(0x0, 0x2) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1000, 0x410004) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0xac080) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r0, 0xa, 0x0, 0x829c, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3}, 0x20) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dd032cbd7000fbdbdf25010000000900010073797a3100000000140002006d61637365633000e4ffffffffffffff0900010073797a300000000005000400010000000900030073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x80) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x3, 0x0) getsockname$llc(r0, 0x0, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000080)="f206192c06be011aeb1f727797613fec2aeb2f43abb4553e27ed7001b1e34dc2462b3ffc58cf6c838f4441333bf7d2d56cb81a2a08a4b965710270e49d05580edddfd68c3c4e7f59daf4cdab767fb0c917abbf376f055cc43a0e56b18f93161c39d3ce066ae73da7807ee23f845b34115a344d40b31a6499b6befc212ec978d67073fe7f1a7033a6397003366ec4e339cc828da9ffaa5fa6a15584d53b42a25f2a94a5c0e1343c1e46e1976dfdccaa27576be573a25ac8247be3090cbd3e3ba96fba0e9e260debb6dd43ad2eb0cd55df344324263d6e4499621ff117", 0xdc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:07 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = gettid() sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x10000020, 0x8, 0x7, 0x7ff, 0x2, 0x8, 0x4, 0x6}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:07 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x5) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x0, 0x1, {0x5, @struct={0x70, 0x2}, 0x0, 0x4, 0xfffffffffffffff9, 0x8001, 0x8, 0x100000000, 0x402, @usage=0x5, 0xffff, 0xfffffffc, [0x4, 0x7, 0x200, 0xdfe9, 0x9, 0x2]}, {0x0, @struct={0x1, 0x7}, 0x0, 0x3, 0x3ff, 0x81, 0x6, 0x26937880, 0x0, @usage=0x5, 0x1, 0x2, [0x5, 0xffffffff, 0x1, 0x8001, 0x0, 0x80000000]}, {0x0, @struct={0x8, 0x4}, 0x0, 0x6, 0xfffffffffffff741, 0x3, 0xbfbe, 0xffffffffffffffff, 0x416, @usage=0x5, 0x3, 0x10000, [0xffffffffffffff73, 0x5, 0x47, 0x1000, 0x80, 0xd3]}, {0x6, 0x47, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000480)={0x2, 0x2, {0x5, @usage=0x2, 0x0, 0x8, 0x5, 0x7f, 0xfffffffffffffffb, 0x7000000000, 0x24, @struct={0x5, 0x5}, 0x8000, 0x101, [0x80000001, 0x7fffffff, 0xfd44, 0x100000001, 0x7, 0x5]}, {0x1f, @struct={0x8001, 0x4}, r2, 0x2, 0x164, 0x20, 0xffff, 0x1, 0xa0, @struct={0x0, 0x5}, 0xfffff801, 0x47, [0x7, 0x2, 0x7, 0x7, 0x1, 0x5]}, {0x9, @usage=0x40, 0x0, 0x7, 0xffffffffffff2e42, 0x838, 0x80000000, 0x8000, 0x86, @struct={0x9, 0x5}, 0x9, 0x1, [0x0, 0x7ff, 0x80, 0x100, 0xefffffffffffffff, 0x40]}, {0x6, 0xe3, 0x33c}}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0x7, 0x5, 0x8001, 0x9, 0x1, 0x3, 0x7, 0x1, 0x80000000, 0x95df, 0x5300}) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x1b, 0x2, {0x6, @usage=0xfe, 0x0, 0x3f, 0x9, 0x1, 0x3724, 0x100000001, 0x4d1, @usage=0x8, 0x8, 0x7, [0x9, 0x1f, 0x400, 0x1, 0x9]}, {0x101, @usage=0x7432, 0x0, 0x8, 0x8, 0x0, 0x5, 0x1, 0x80, @usage=0x9, 0x5, 0x401, [0x0, 0x9, 0x2b, 0xcc5, 0x4, 0x9]}, {0x1, @struct={0x20, 0xfffffff7}, 0x0, 0x0, 0xfffffffffffffffd, 0x20, 0x2, 0x8, 0x9b, @struct={0xffff, 0x35}, 0x5, 0x0, [0x7, 0x101, 0x81, 0x38367b0b, 0x4, 0x5]}, {0x18, 0x0, 0x9}}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 3: syz_emit_vhci(0x0, 0x19) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000000000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x4002, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000000c0)={0x2, 0x0, @status={[0x6, 0x80000001, 0xfffffffffffffff7, 0x8000, 0x0, 0x6e]}, [0x8, 0x40, 0x5, 0x400, 0x6, 0x4, 0x1, 0x2, 0x80000000, 0x2, 0x3ff, 0x0, 0x3, 0x7, 0x5, 0x5, 0x5, 0x6, 0x7, 0x793d, 0x6, 0x0, 0x2, 0x20000005, 0xff, 0xffffffffffffffff, 0x4, 0xff, 0x3, 0x7, 0x8, 0x1, 0x7, 0xfffffffffffffff7, 0x3, 0x0, 0x9, 0xc0c5, 0xa5e, 0x19e8, 0x9a, 0x6, 0x80000201, 0x6, 0x0, 0x8000, 0x9, 0xaaa8, 0x0, 0x7, 0x4, 0xb7, 0x1, 0x7, 0x9, 0x46, 0x3, 0x9, 0x7, 0xa1, 0x4, 0x100000000, 0x7, 0x2]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='io.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x6, 0x8, 0x0, 0x24, r1, 0x101, [], r3, r4, 0x2, 0x2, 0x2}, 0x40) init_module(&(0x7f0000000b40)='!.*(*\x00', 0x6, &(0x7f0000000b80)='io.stat\x00') 03:00:07 executing program 2: ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000040)={0x0, 0xa30, 0x7f, &(0x7f0000000000)=0x2}) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000003, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x61}}}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x14}, 0x40) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 03:00:07 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0xfe, 0x31db, 0x4a, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x20, 0x9, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000980)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa2, 0x5, 0x1, 0x20, @dev={0xfe, 0x80, [], 0x2e}, @private1, 0x80, 0x748, 0x3, 0x7fb6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x2, 0x2, 0x5, 0x9, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f0000000300)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x1, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x0, 0x400, 0x9c}, 0x10, 0x0, r10}, 0x78) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x1, 0xffffffff, 0x14, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x7800, 0x4be1, 0xd14f}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x89200001}, 0xc, &(0x7f0000001500)={&(0x7f0000000c80)={0x868, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6d}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x75e}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x31f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8572}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r4}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1fffc000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xce}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x59ac}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x79b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250500000008000200040000002800018014000400fc00000000000000000000000000000008000300ffffffff08000300ac1e01015800018014000400fc010000000000000000000000000001140004002001000000000000000000000000000108000700", @ANYRES32=r4, @ANYBLOB="060005004e220000050002000400000014000400fe8000000000002408000300010000000800030000000000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x1) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 3: syz_emit_vhci(0x0, 0x19) 03:00:07 executing program 3: syz_emit_vhci(0x0, 0x19) 03:00:07 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x202280, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8c842, 0x0) r3 = socket(0x2a, 0x3, 0x7) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000100)={{r3}, r4, 0x8, @unused=[0x8, 0xba78, 0x1f, 0x6], @subvolid=0x2}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) 03:00:07 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:07 executing program 5: socket$inet6(0xa, 0xa, 0x7ffffffb) r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:07 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0xffffffffffffffff) 03:00:07 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000000000000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x4002, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000000c0)={0x2, 0x0, @status={[0x6, 0x80000001, 0xfffffffffffffff7, 0x8000, 0x0, 0x6e]}, [0x8, 0x40, 0x5, 0x400, 0x6, 0x4, 0x1, 0x2, 0x80000000, 0x2, 0x3ff, 0x0, 0x3, 0x7, 0x5, 0x5, 0x5, 0x6, 0x7, 0x793d, 0x6, 0x0, 0x2, 0x20000005, 0xff, 0xffffffffffffffff, 0x4, 0xff, 0x3, 0x7, 0x8, 0x1, 0x7, 0xfffffffffffffff7, 0x3, 0x0, 0x9, 0xc0c5, 0xa5e, 0x19e8, 0x9a, 0x6, 0x80000201, 0x6, 0x0, 0x8000, 0x9, 0xaaa8, 0x0, 0x7, 0x4, 0xb7, 0x1, 0x7, 0x9, 0x46, 0x3, 0x9, 0x7, 0xa1, 0x4, 0x100000000, 0x7, 0x2]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='io.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x6, 0x8, 0x0, 0x24, r1, 0x101, [], r3, r4, 0x2, 0x2, 0x2}, 0x40) init_module(&(0x7f0000000b40)='!.*(*\x00', 0x6, &(0x7f0000000b80)='io.stat\x00') 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 5: socket$inet6(0xa, 0x5, 0x5) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'syztnl2\x00', r1, 0x29, 0xdf, 0x3, 0xfa, 0x20, @empty, @empty, 0xa0, 0x20, 0x3, 0x7}}) accept4(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000200)=0x80, 0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x180800) getpeername(r3, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) 03:00:08 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000005, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x80000e, r0) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x800000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000e9ff000000000000000000"]) 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ffffffffd, 0x70b01) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 3 (fault-call:0 fault-nth:0): syz_emit_vhci(0x0, 0x19) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='^#\'w*?]n.\x00') getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3}, 0x8) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:08 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1619.708382] FAULT_INJECTION: forcing a failure. [ 1619.708382] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.731279] CPU: 0 PID: 21985 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1619.739212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1619.748575] Call Trace: [ 1619.751175] dump_stack+0x1b2/0x281 [ 1619.754812] should_fail.cold+0x10a/0x149 [ 1619.758967] should_failslab+0xd6/0x130 [ 1619.762954] kmem_cache_alloc_node+0x263/0x410 [ 1619.767571] __alloc_skb+0x5c/0x510 [ 1619.771220] vhci_write+0xb1/0x420 [ 1619.774878] __vfs_write+0x44c/0x630 [ 1619.778605] ? kernel_read+0x110/0x110 [ 1619.782603] ? rw_verify_area+0xe1/0x2a0 [ 1619.786673] vfs_write+0x17f/0x4d0 [ 1619.790221] SyS_write+0xf2/0x210 [ 1619.793680] ? SyS_read+0x210/0x210 [ 1619.797332] ? __do_page_fault+0x159/0xad0 [ 1619.801565] ? do_syscall_64+0x4c/0x640 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) socket(0x26, 0x5, 0xfffffff7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101001) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x300000d, r1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1619.805551] ? SyS_read+0x210/0x210 [ 1619.809183] do_syscall_64+0x1d5/0x640 [ 1619.813077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1619.818265] RIP: 0033:0x417ab1 [ 1619.821457] RSP: 002b:00007f31d7570c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1619.829196] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 1619.836471] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 00000000000000f1 [ 1619.843751] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.851024] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 03:00:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000881) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) 03:00:08 executing program 1: syz_open_dev$dri(0x0, 0x3ffffffffd, 0x70b01) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x2010, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80, 0x1000) recvfrom$llc(r0, &(0x7f00000001c0)=""/185, 0xb9, 0x101, &(0x7f0000000280)={0x1a, 0x7, 0x67, 0x5, 0x40, 0x3f, @dev={[], 0x33}}, 0x10) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) [ 1619.858294] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c 03:00:08 executing program 3 (fault-call:0 fault-nth:1): syz_emit_vhci(0x0, 0x19) 03:00:08 executing program 1: syz_open_dev$dri(0x0, 0x3ffffffffd, 0x70b01) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x41, 0x1f, 0x8, 0x81, 0x0, 0x8, 0x800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x6615, 0xfffffffffffffff8, 0x4, 0x5, 0x0, 0x77}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x80000001) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25050000000800020003000000080003000200000038000180060005004e20000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e230000080006000200000414000400fe80000000000000000000000000007f5f0000000000000002000100000008000200000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, r3) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x3, 0x0, 0xfffffff7, 0x21, @dev={0xfe, 0x80, [], 0x1e}, @mcast1, 0x1, 0x20, 0x3, 0x10000}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x298, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 03:00:08 executing program 1: syz_open_dev$dri(0x0, 0x3ffffffffd, 0x70b01) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1619.936016] FAULT_INJECTION: forcing a failure. [ 1619.936016] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.992764] CPU: 0 PID: 22012 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1620.000720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1620.010111] Call Trace: [ 1620.012711] dump_stack+0x1b2/0x281 [ 1620.016354] should_fail.cold+0x10a/0x149 [ 1620.020524] should_failslab+0xd6/0x130 [ 1620.024517] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1620.029635] __kmalloc_node_track_caller+0x38/0x70 [ 1620.034698] __alloc_skb+0x96/0x510 [ 1620.038342] vhci_write+0xb1/0x420 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x2, 0x0) r1 = socket(0x29, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001140)={{r1}, 0x0, 0x10, @inherit={0x58, &(0x7f00000001c0)={0x1, 0x2, 0x3f424a1a, 0x7, {0x0, 0x5, 0x1f, 0xc9d, 0x4}, [0x6, 0x1]}}, @subvolid=0x8000}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20048091) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1620.041902] __vfs_write+0x44c/0x630 [ 1620.045626] ? kernel_read+0x110/0x110 [ 1620.049531] ? rw_verify_area+0xe1/0x2a0 [ 1620.053597] vfs_write+0x17f/0x4d0 [ 1620.057157] SyS_write+0xf2/0x210 [ 1620.060619] ? SyS_read+0x210/0x210 [ 1620.064289] ? __do_page_fault+0x159/0xad0 [ 1620.068534] ? do_syscall_64+0x4c/0x640 [ 1620.072519] ? SyS_read+0x210/0x210 [ 1620.076163] do_syscall_64+0x1d5/0x640 [ 1620.080069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1620.085269] RIP: 0033:0x417ab1 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x70b01) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) [ 1620.088484] RSP: 002b:00007f31d7570c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1620.096206] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 1620.103499] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 00000000000000f1 [ 1620.110809] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1620.118282] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1620.125824] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c 03:00:08 executing program 3 (fault-call:0 fault-nth:2): syz_emit_vhci(0x0, 0x19) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x40400) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x70, 0x2, 0x1, 0x5, 0xb388}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r3, 0xffff0000, 0x80000000, 0x1000, 0x4, 0xa, 0xef4, 0x1, 0x8001, 0x3, 0x1}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r4 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, r4) 03:00:08 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)) getpid() r1 = gettid() r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001140)={{r4}, 0x0, 0x10, @inherit={0x70, &(0x7f0000000140)={0x1, 0x5, 0xff, 0xb9f, {0x25, 0xab, 0x5, 0x6, 0x8000}, [0x7fff, 0x0, 0x200, 0x7ff, 0x6]}}, @devid=r5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x3f, 0x1ff, 0x20, 0x7, 0x2b, 0xff, 0x1000, 0x2, 0x5}) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x8, 0x40, 0x7, 0x6, 0x0, 0x2, 0x1902f, 0x11, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x8020, 0x7fffffff, 0x0, 0x3, 0x1000, 0x3, 0x1}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000005c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000600)={"31a38398b14397e36724b57bb00ecf9e", r7, 0x0, {0x10001, 0x7}, {0x8, 0xfa}, 0x9, [0xfffffffffffffffe, 0x0, 0x5, 0x5, 0x1, 0x6, 0x0, 0x81, 0x1, 0x80, 0x401, 0x6, 0x6, 0x7, 0x3, 0x1]}) syz_emit_vhci(0x0, 0x19) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40080, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x2) 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:08 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$caif_stream(0x25, 0x1, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x6) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, r1) 03:00:08 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040)=0x2000000, 0x4) syz_emit_vhci(0x0, 0x19) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x11, r0, 0xfffffffffffffffc) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) socketpair(0x23, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername(r1, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80) 03:00:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = accept4(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80, 0x80000) getpeername(r1, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000280)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xfb, 0x6, 0x1d, 0x28, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}, 0x8081, 0x1, 0x0, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xd, 0xfffffff9, 0x0, 0x4, 0x604, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x6, 0x78c, 0x7, 0x1, 0x2, r4, 0xaf, [], r2, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x40) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r7, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x18c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x8000, 0x32, 0x6, 0x1}, {0x1f, 0x3f, 0x81, 0xffffffff}, {0x95, 0x3f, 0x8, 0x3f}, {0xd0d3, 0x9, 0x7f, 0x80000001}, {0x2b1, 0x6, 0xc0, 0x4}, {0x80, 0x79, 0x1, 0xcf}, {0x4, 0x8, 0x3f, 0x4d}, {0x4, 0x2, 0x3, 0x7}, {0x3, 0x3f, 0x0, 0x80000001}]}}}]}}, {{0x8, 0x1, r2}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x401, 0x3f, 0x1f, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x11}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x50) 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd9) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x19) socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x105000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_emit_vhci(&(0x7f00000010c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESOCT=r0], 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) 03:00:08 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x8000, 0x480000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) prctl$PR_SVE_GET_VL(0x33, 0x437d) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:08 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0) 03:00:09 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 3: syz_emit_vhci(0x0, 0x19) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040004}, 0x40800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) prctl$PR_SVE_GET_VL(0x33, 0x1de7b) 03:00:09 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 03:00:09 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, r0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r1) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 03:00:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x1000001, 0xffffffffffffffff) 03:00:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r0, 0x0) 03:00:09 executing program 3: syz_emit_vhci(0x0, 0x19) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xf1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xa05}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x8800}, 0x80) socket$inet6(0xa, 0x3, 0x9) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 5: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:09 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) 03:00:09 executing program 3: syz_emit_vhci(0x0, 0x26) 03:00:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x496c7aba2f085f73, 0xffffffffffffffff) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) 03:00:09 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x200, 0x80, 0x8, 0x8, 0x2, 0x1558ecd3, 0x40}, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x20100, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000080)={'syztnl1\x00', 0xffffffffffffffff}) 03:00:09 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000300)='net_prio.ifpriomap\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xda}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_emit_vhci(0x0, 0x19) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:09 executing program 3: syz_emit_vhci(0x0, 0xfffffd96) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4b}, "1ad49a62b0a64cc28bc01c8e536871661092ee6aaba75cd06c1f6cf39d289be5ed2dda8d17601d6d4e377ef803dfce70392f314b40b0da0634c51bd44b503fbb46880d5d646596c94ac8b8"}, 0x4f) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x402783, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x3fe) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:09 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:09 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x18f8b3ac85286263, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:09 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff19) getpid() 03:00:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000016, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:09 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000000)="0048c81e0d25e0104ea14ebc4308436b2cbbbe9b73faafec5f167245ecf270e65fff266b3fe9b1b03e3391ab4525b90562b6493244289e73f14646b152eea4260e0f852f435d6f9cdb28be299f8fca8c10d74b656fbe163fe81875169770be64ce2493842026d05b21632faf3395817c533773a9f3b725c550f90383b55caec105ba29eb895ad3411dde20ba5f23226f2d9f4d78fb0dc71fa66c7d6f2803188b48214a077f43ecb1bbedbe3602db3d9ea21633f7842f98c24d6011b38fe5833a18dba279811e3a71c245e19583a7ec7e3fb23d", &(0x7f0000000100)=""/136, &(0x7f00000001c0)="d923d48fd749f582772da5", &(0x7f00000003c0)="21dd73fd0b89485ec11a79b77b39d8f094b30eed0be9defb533ec0503ef6211f4966471c656ec94de1fc6e4fd2cc69d526ddd1c3d16953e7d705538109fffb98eca43b1ffdfe44779f5038564b74c4e6063e9123f6218d9a59daf51ea322db2f992fddbfdbc438496f7f81b64a1f70425ef2d2088741ca3c243396f659d4fd26eccf704aab7a8357de04c266ed06464b3920d9557e2fbd5464bda8595a4282532690390376974ea912283d1c", 0x80000000, 0x1, 0x4}, 0x38) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) 03:00:09 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x44002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x80800) r2 = getegid() ioctl$TUNSETGROUP(r0, 0x400454ce, r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf2508000000050001000100000014000300fe8000000000000000000000000000aa08000400e000000208000500e00000010500fc01000000000000000000000000000014000300fc000000000000000000000000000001050001000000000014000300fc020000000000000000000000000000140003000000000000000000000000000000000000000000000000000000fca9c2b84a6e4383dc73b027f9367d5bcaaad6bb3bfac4638006910250a4"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x1, 0x5d}, "6c80c4f8131d73d9a7ef807f03cf9c92a9f6671f66d73e65f990764acc96cf87dd144beab6e35fee5fb7046514334264d3bfc62915d746b9b868acb941477727c9578b9b9a2bbe899b92c0f8e0ea575417db140b5ee9e770ab93a06981"}, 0x61) 03:00:10 executing program 2: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000040) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa, r0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_bcm(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003980)=[{0x0, 0xffffffffffffff5a}, {0x0}], 0x2, &(0x7f0000000100)=""/100, 0x64}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x80010, 0xffffffffffffffff, 0x7) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) 03:00:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 5: socket$inet6(0xa, 0x5, 0x10000) r0 = socket$inet6(0xa, 0x800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 03:00:10 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000)="7f26232e80c2ff66349713581963e03442c7d9fcb8732cc9d5e1ecdf5725f983364e81195d333b50321f43def10f2699f8eb340b456bc23e1685e9", &(0x7f0000000080)=""/126}, 0x20) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000140)) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffffe3) 03:00:10 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = socket(0x23, 0x5, 0x7f) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) [ 1621.622927] Bluetooth: hci4 SCO packet for unknown connection handle 1 03:00:10 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) socket(0x21, 0x3, 0x101) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) 03:00:10 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd9) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000000c0)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0x19) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x3) 03:00:10 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x4800) write$sysctl(r0, &(0x7f0000000040)='2\x00', 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@dev={[], 0x33}, @remote]}) mmap$perf(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 3: openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getpeername(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000100)=0x80) r1 = accept4(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000280)=0x80, 0x800) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 03:00:10 executing program 5: r0 = socket$inet6(0xa, 0x800, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:10 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x2) 03:00:10 executing program 4: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x0, 0x7, {0x80, @usage=0x9, 0x0, 0x0, 0x100, 0x8000, 0x6, 0x7, 0x0, @struct={0x1, 0x476}, 0x6, 0x1, [0x20, 0x8, 0x7b, 0x4, 0x5, 0x3]}, {0x0, @usage, 0x0, 0x5, 0xffffffffffffffff, 0xfff, 0x8, 0x4, 0x44a, @struct={0xffffffc5, 0x80000001}, 0x200, 0x20, [0x7, 0x61, 0xff, 0x9, 0x78, 0x52d]}, {0x2, @usage=0x101, 0x0, 0x3ff, 0x8, 0x3, 0x80000001, 0x1, 0x20, @struct={0x17445eb0, 0xffffffe0}, 0x4, 0x6, [0x2, 0x100, 0x8, 0xffffffff80000001, 0x800, 0x3f]}, {0x9, 0x4, 0xfeee}}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x3, 0x0, 0xfffffff7, 0x21, @dev={0xfe, 0x80, [], 0x1e}, @mcast1, 0x1, 0x20, 0x3, 0x10000}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x298, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0x30) 03:00:10 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x500000f, r0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3ff) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffef4) 03:00:10 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x41, 0x1f, 0x8, 0x81, 0x0, 0x8, 0x800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x6615, 0xfffffffffffffff8, 0x4, 0x5, 0x0, 0x77}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x80000001) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf25050000000800020003000000080003000200000038000180060005004e20000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e230000080006000200000414000400fe80000000000000000000000000007f5f0000000000000002000100000008000200000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, r3) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000c, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0x19) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 03:00:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x208002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400020014000200776c616e3000000000000000000000000900030073797a31000000006d6e1fd6945e5732dcfde0737fef3e455911d7b378c2d31ae3eb16059d2546fe43fe676a5d9f56e90c07d3d8a18c27fcbc216ca2563ce470c5a2ff1844c789f2c7d82f5d7905d9bf2fd1"], 0x34}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) write$sysctl(r4, &(0x7f0000000080)='6\x00', 0x2) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\x00L\x00\x00\x00\x00\x00\x00\x00z1\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0xfffffffe, 0x3, 0x1f, 0x20, 0x1, 0x95, [], 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x40) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0xe67415fa) 03:00:10 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x103080) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:10 executing program 1 (fault-call:4 fault-nth:0): syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x29, 0x0, 0x8, 0x3, 0x12, @mcast2, @private1, 0x700, 0x10, 0xaecc, 0xffffff2c}}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/222, 0xde}], 0x6, &(0x7f0000000640)=""/224, 0xe0}, 0x10000) getsockname$llc(r1, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000007c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x2, 0x7ff, 0x100, 0x9e1, 0x509, 0x1, 0x1, [], r0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf25010000000900010073797a30000000000900010073797a30000000000900030073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44020) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0xa, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) munlockall() pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000800)={"ff098597d2c66e8d964e86af1d93c2f9", 0x0, 0x0, {0x1a80, 0x9}, {0x40, 0x7}, 0x9, [0x401, 0x8000, 0x2, 0x100, 0xece, 0x100000001, 0x0, 0xfff, 0x401, 0x9, 0x8, 0x7fffffff, 0x6, 0x8, 0x1, 0x80000001]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000900)=r4) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000a40)="da8916ac4e581b0452ae490f511d0f836d31230a8807122007b63ff72739e3b2d7d0a520ba73305ba836806be2265cc7b6070ebdbd845ce07d989603a57831fc2d584e0f85404dc7b64ea66480e894aa4ef8a3028134487d6a71bdb0fc44e6daccce3559e899c5fedf86b062d526881d4b23e4a9ba662dcaa0b71514", 0x7c) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140)='net_prio.ifpriomap\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) init_module(&(0x7f0000000000)='^).\\%]\\\'{-+)-{\x00', 0xf, &(0x7f0000000040)='{-\x00') 03:00:10 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0xa0000) syz_emit_vhci(0x0, 0x19) 03:00:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000002, 0xffffffffffffffff) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0xfdb2) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0xdb8c) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x3f, 0x3, 0x2, 0x7, @private1, @initdev={0xfe, 0x88, [], 0xff, 0x0}, 0x7800, 0x7, 0x3, 0x80000001}}) getpeername(r0, &(0x7f0000000240)=@generic, &(0x7f0000000200)=0x80) 03:00:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r0}, 0x0, 0x8, @inherit={0x80, &(0x7f00000000c0)={0x0, 0x7, 0x800, 0x8, {0x10, 0x7, 0x5, 0xff, 0x7}, [0x1, 0x80, 0xb7, 0x8021, 0x7f, 0x3, 0x7f]}}, @subvolid=0x6}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000001140), &(0x7f0000001180)=0x4) 03:00:10 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xbe, 0x8, 0xf, 0x0, 0x0, 0x200, 0x44001, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xfffffffffffffffc}, 0x41008, 0x3, 0x55a, 0x8, 0x4, 0xd49, 0x3f}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 03:00:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x4, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x3, 0x8, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x1, 0x0, 0xc, 0x6, 0x7}, @call={0x85, 0x0, 0x0, 0x2a}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x0, 0xdf, &(0x7f00000000c0)=""/223, 0x41100, 0x6, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x6, 0x1}, 0x10}, 0x78) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) r1 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@phonet, &(0x7f0000000380)=0x80, 0x800) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f00000003c0)=0x8, 0x4) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x6e, 0x5, 0x10, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf880, 0x1, 0x2, 0x81}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0xe, 0x5, 0x8001, 0x22, @empty, @private1={0xfc, 0x1, [], 0x1}, 0xf, 0x7, 0x7, 0x1}}) 03:00:10 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:10 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x9, 0x1, 0x12, @local, @mcast1, 0x7, 0x1f, 0x5, 0xcd}}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0xc, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x20) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0\x00', @random}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0) 03:00:11 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffd53) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc9, "d0891646b280e060"}}}, 0xe) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x1000}, 0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) 03:00:11 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x3c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @multicast1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000040)={'veth1\x00', @ifru_flags}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x200, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) 03:00:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000180)=""/209, 0xd1}], 0x4, &(0x7f00000002c0)=""/21, 0x15}, 0x2100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0xffffffffffffffff) 03:00:11 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x20) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 3: syz_emit_vhci(0x0, 0x5) 03:00:11 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1a042860}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044000}, 0x40000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x20050, r2, 0xffffffff) 03:00:11 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 3: syz_emit_vhci(0x0, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000004, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@empty, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=""/197, &(0x7f0000000000)=0xc5) 03:00:11 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x9, 0x1, 0x12, @local, @mcast1, 0x7, 0x1f, 0x5, 0xcd}}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0xc, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 3: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) syz_emit_vhci(0x0, 0x19) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, r0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000e, 0xffffffffffffffff) 03:00:11 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x70, 0x8, 0x81, 0x1, 0xf4, 0x0, 0x445, 0xc294, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0xffff}, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8, 0x1, 0x800}, r0, 0xb, 0xffffffffffffffff, 0xc) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x361403) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000040) syz_emit_vhci(0x0, 0xffffffffffffff94) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x3ff) r2 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) 03:00:11 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x10, r0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004) 03:00:11 executing program 5 (fault-call:0 fault-nth:0): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000c40)={'macvlan0\x00', @ifru_addrs=@can}) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x620bc1, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"7d144e9b791be0243ca68e13887d4212", r1, r2, {0xfffffffffffffffa, 0x8b3}, {0xff, 0x8}, 0x100, [0x2, 0xbb65, 0x5, 0x5, 0x67cb, 0x10000, 0x2, 0xffffffff, 0x2, 0x5, 0x4, 0x101, 0x7, 0x7, 0x7, 0x6]}) syz_emit_vhci(0x0, 0xfffffffffffffcea) [ 1623.229509] FAULT_INJECTION: forcing a failure. [ 1623.229509] name failslab, interval 1, probability 0, space 0, times 0 03:00:11 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2182, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0) [ 1623.270033] CPU: 1 PID: 22382 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1623.277958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.287321] Call Trace: [ 1623.289914] dump_stack+0x1b2/0x281 [ 1623.293550] should_fail.cold+0x10a/0x149 [ 1623.297730] should_failslab+0xd6/0x130 [ 1623.301720] kmem_cache_alloc+0x28e/0x3c0 [ 1623.305878] __d_alloc+0x2a/0xa20 [ 1623.309341] hugetlb_file_setup+0x1b3/0x760 [ 1623.313690] ? hugetlbfs_fill_super+0x950/0x950 03:00:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000140)=""/40, &(0x7f0000000180)=0x28) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000e00)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001200)={0x0, 0x4, {0x101, @usage=0x5, 0x0, 0xc0, 0x1, 0x7, 0x1, 0x7, 0x40, @usage=0x9, 0x3, 0x3, [0x1f, 0x0, 0x800, 0xd44, 0x9, 0x7c83]}, {0x1, @usage, 0x0, 0x9, 0x5, 0x2, 0xe446, 0x8001, 0x80, @usage=0x4afa, 0x38ea, 0x7f, [0x2, 0x7, 0x9, 0x1, 0x1, 0xf5]}, {0x8001, @struct={0x2, 0x401}, 0x0, 0x0, 0x1, 0xbe7, 0xdf, 0x2, 0x20, @struct={0x1, 0xffffffff}, 0x7, 0x38, [0x40, 0x6, 0xeb, 0x1, 0xcc, 0x7fffffff]}, {0x7, 0x7, 0x80000001}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001600)={0x2, 0x2, {0x5, @struct={0xfffffe01, 0x4}, r2, 0x9, 0x44, 0x2, 0x9, 0x1, 0x7a, @usage=0x1, 0x2, 0x4e61, [0xffffffffffffffff, 0xab7, 0x16, 0x6, 0x7ff, 0xb745]}, {0x3, @usage=0xac, r3, 0xfffffffffffffffe, 0x401, 0xffffffffa4281788, 0x3b, 0x800, 0x8, @usage=0xe4, 0x7fffffff, 0x4, [0xafe, 0x3, 0x1, 0x6, 0x5977, 0x101]}, {0x400, @usage=0x5, 0x0, 0x30000, 0x400, 0x400, 0x81, 0x4, 0x88, @struct={0x60a, 0x1}, 0x4, 0x7f, [0x2, 0x0, 0x2, 0x4, 0x6, 0x4]}, {0x3ff, 0x80000001, 0x1ff}}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1623.318382] SyS_mmap_pgoff+0x361/0x510 [ 1623.322375] ? find_mergeable_anon_vma+0x230/0x230 [ 1623.327315] ? __do_page_fault+0x159/0xad0 [ 1623.331561] ? do_syscall_64+0x4c/0x640 [ 1623.335545] ? align_vdso_addr+0x250/0x250 [ 1623.339876] do_syscall_64+0x1d5/0x640 [ 1623.343784] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1623.348986] RIP: 0033:0x45e219 [ 1623.352176] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1623.359918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 03:00:11 executing program 3: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x880) syz_emit_vhci(0x0, 0x19) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0x7) 03:00:11 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000c, 0x50, r1, 0x1ffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='/dev/nvram\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004841}, 0x840) 03:00:11 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = gettid() pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x80, 0xbe, 0xffff, 0x1ff, 0x190, 0x3, 0x3, 0x8, 0xfffffffb}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) [ 1623.367196] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1623.374563] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1623.381839] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000000 [ 1623.389115] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x3) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, r2) 03:00:11 executing program 5 (fault-call:0 fault-nth:1): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:11 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), &(0x7f0000000040)) pkey_free(r0) 03:00:11 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1623.512770] FAULT_INJECTION: forcing a failure. [ 1623.512770] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.541408] CPU: 0 PID: 22418 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1623.549436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.558806] Call Trace: [ 1623.561409] dump_stack+0x1b2/0x281 [ 1623.565051] should_fail.cold+0x10a/0x149 [ 1623.569217] should_failslab+0xd6/0x130 [ 1623.573217] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1623.577896] ? __lockdep_init_map+0x100/0x560 [ 1623.582413] resv_map_alloc+0x41/0x330 [ 1623.586377] hugetlbfs_get_inode+0x22c/0x420 [ 1623.590801] hugetlb_file_setup+0x218/0x760 [ 1623.595134] ? hugetlbfs_fill_super+0x950/0x950 [ 1623.599822] SyS_mmap_pgoff+0x361/0x510 [ 1623.603811] ? find_mergeable_anon_vma+0x230/0x230 [ 1623.608870] ? __do_page_fault+0x159/0xad0 [ 1623.613118] ? do_syscall_64+0x4c/0x640 [ 1623.617164] ? align_vdso_addr+0x250/0x250 [ 1623.621415] do_syscall_64+0x1d5/0x640 [ 1623.625347] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1623.630538] RIP: 0033:0x45e219 [ 1623.633725] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1623.641442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1623.648720] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1623.655999] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 03:00:11 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) syz_emit_vhci(0x0, 0xffffffffffffffd7) 03:00:11 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x400000000008001, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) write$cgroup_devices(r0, &(0x7f0000001140)={'a', ' *:* ', 'wm\x00'}, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000140)={{r2}, r3, 0xc, @inherit={0x68, &(0x7f00000000c0)={0x0, 0x4, 0x1ff, 0x7, {0x0, 0x7fffffff, 0x0, 0x2}, [0x8, 0x200, 0x6, 0x10001]}}, @subvolid=0x8}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:12 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2010, r1, 0x0) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x1, 0x81, 0x1, 0xa08, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 03:00:12 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffe19) prctl$PR_GET_CHILD_SUBREAPER(0x25) 03:00:12 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f00000000c0)="1000117cb9c959f044bc1c224a3e908b653d81d4249a4bb394abd4ece0f6c6922f51a424dfc18b5a53f99abf05b63710cd89802031d02c2b1d30ebef90f2c1f54addc9e348858ff082f796423b46cefb026669dba1e07f9bf26e9b123e", 0x5d) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) [ 1623.663281] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000001 [ 1623.670752] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getsockname$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2506000000080004006401010214000600766574683100000000000000000000000500010000000000140006006c6f0000000000000000000000000000050001000000000014000200ffdfffffff0000000000000000000001050001000000000008000500ac1e01010500010000000000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40044000) 03:00:12 executing program 5 (fault-call:0 fault-nth:2): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:12 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x480) 03:00:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) kexec_load(0x1ff, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="5366903caed23cde9e1d6ec7a15730b2476ae1a3c81fdee2578dcddf596dcf4f13136fff6f355814427d9bbbc9244c34f913ddda3884f507757c5a4f471c0a60dbab54aec9ab1e4e814caaf6497cf52986f16d941a44f6ffc1d8d6dfc6105c22c1aa7e075d02ff58921272bc4b91f8f3c05f557646460909670e5ad67fe2f4f23a3907697a8606507877fcb82387e989a5f160418378106591f5a3b35cfa375cd1a42b0c65da29328e06f8fad39eafd85d1b434bf4901fed218d9143aa353c15895b634297", 0xc5, 0x1}, {&(0x7f00000001c0)="6e300d34b03ea1e78ccf0ad3a5fc88482360bf88097dd0e0b55879357168b658d866dd580ff8330cd3011dc3f0f85d88912f7a6dba747d55a77c6d9477201789be3e998e593bab850e7b596be5d98de028b5458fb032cd5f1c59619c0f68bffa52421582d77a754db1f2b15353e1b0cbbb3cb4e034d00dbadad01b36e74456fcd00c0d4958430837a2cc6f1c9d55fa5f65b25815a12daf61dc76081b98a4e7e667b2", 0xa2, 0x3, 0x7ff}], 0x3e0000) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009, 0x10, r2, 0xff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 03:00:12 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffec8) [ 1623.766366] FAULT_INJECTION: forcing a failure. [ 1623.766366] name failslab, interval 1, probability 0, space 0, times 0 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x3, 0x68040) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000000)=""/253, &(0x7f0000000100)=0xfd) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1623.830088] CPU: 1 PID: 22449 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1623.838105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1623.847988] Call Trace: [ 1623.850595] dump_stack+0x1b2/0x281 [ 1623.854244] should_fail.cold+0x10a/0x149 [ 1623.858499] should_failslab+0xd6/0x130 [ 1623.862490] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1623.867172] resv_map_alloc+0x79/0x330 [ 1623.871069] hugetlbfs_get_inode+0x22c/0x420 [ 1623.875487] hugetlb_file_setup+0x218/0x760 03:00:12 executing program 2: socket(0x2b, 0x802, 0x5) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x2}, 0x10) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 1623.879814] ? hugetlbfs_fill_super+0x950/0x950 [ 1623.884529] SyS_mmap_pgoff+0x361/0x510 [ 1623.888628] ? find_mergeable_anon_vma+0x230/0x230 [ 1623.893687] ? __do_page_fault+0x159/0xad0 [ 1623.897930] ? do_syscall_64+0x4c/0x640 [ 1623.901912] ? align_vdso_addr+0x250/0x250 [ 1623.906161] do_syscall_64+0x1d5/0x640 [ 1623.910065] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1623.915261] RIP: 0033:0x45e219 [ 1623.918450] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 03:00:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000002, r1) 03:00:12 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x249480, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001480)='SMC_PNETID\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r4, 0x3) 03:00:12 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x1000, 0x10}, 0xc) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) [ 1623.926167] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1623.933531] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1623.940808] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1623.948098] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000002 [ 1623.955379] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:12 executing program 5 (fault-call:0 fault-nth:3): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:12 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x79c2671162f5959e) syz_emit_vhci(0x0, 0x19) 03:00:12 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1624.036661] FAULT_INJECTION: forcing a failure. [ 1624.036661] name failslab, interval 1, probability 0, space 0, times 0 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x48280, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7fff, 0x4080) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0x2, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7d00000}], &(0x7f00000001c0)='GPL\x00', 0x7, 0x3f, &(0x7f0000000200)=""/63, 0x41000, 0x8, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x4, 0x5, 0x8}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x3d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0xf5, 0xc, 0x0, 0x8001, 0xfca2}, @generic={0x81, 0x1, 0x5, 0x4, 0x6}], &(0x7f0000000040)='GPL\x00', 0x81, 0x50, &(0x7f0000000080)=""/80, 0x41100, 0xa, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x5, 0x401, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x78) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1624.077681] CPU: 1 PID: 22485 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1624.085611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.094998] Call Trace: [ 1624.097598] dump_stack+0x1b2/0x281 [ 1624.101234] should_fail.cold+0x10a/0x149 [ 1624.105431] should_failslab+0xd6/0x130 [ 1624.109411] kmem_cache_alloc+0x28e/0x3c0 [ 1624.113565] hugetlbfs_alloc_inode+0x75/0x1a0 [ 1624.118069] ? init_once+0x20/0x20 [ 1624.121617] alloc_inode+0x5d/0x170 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) pkey_alloc(0x0, 0x1) r1 = pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x1) pkey_free(r1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000010, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) [ 1624.125246] new_inode+0x1d/0xf0 [ 1624.128617] hugetlbfs_get_inode+0x241/0x420 [ 1624.133033] hugetlb_file_setup+0x218/0x760 [ 1624.137362] ? hugetlbfs_fill_super+0x950/0x950 [ 1624.142054] SyS_mmap_pgoff+0x361/0x510 [ 1624.146133] ? find_mergeable_anon_vma+0x230/0x230 [ 1624.151071] ? __do_page_fault+0x159/0xad0 [ 1624.155322] ? do_syscall_64+0x4c/0x640 [ 1624.159312] ? align_vdso_addr+0x250/0x250 [ 1624.163569] do_syscall_64+0x1d5/0x640 [ 1624.167564] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.172799] RIP: 0033:0x45e219 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102240}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf25020000000800010000000000080001000300000008000100030000000800010003850000"], 0x34}, 0x1, 0x0, 0x0, 0x4008110}, 0xfa58077767026ba9) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000007, r0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x300800, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0xf}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501200, 0x0) pkey_mprotect(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x1000004, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x400) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:12 executing program 3: syz_emit_vhci(0x0, 0x19) getpid() r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x2, 0x18000034, 0xffffffff, 0x800009, 0x6, 0x4, 0x6, 0x9, 0xcf40}, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, 0x0) ioprio_get$pid(0x2, 0x0) [ 1624.175989] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1624.183713] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1624.191021] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1624.198298] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1624.205570] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000003 [ 1624.212850] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:12 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xcc94, 0x34040) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:12 executing program 5 (fault-call:0 fault-nth:4): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:12 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:textrel_shlib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xb8, r2, 0x180, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @empty}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:syslog_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:dhcp_etc_t:s0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x604000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1f) 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x8, 0x0, 0x10001, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:12 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001140)={{r0}, 0x0, 0x8, @unused=[0x1ff, 0x7ff, 0x802, 0x8], @subvolid=0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x7ff, 0x7, 0x200, 0x80, 0x5, 0x2b, 0x200, 0x4, 0xcb5d, 0x3, 0x8f08}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40400052}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000004) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="040000000000000000000000000000080000000000000000ebc60177bf760565cb143918070e187e375f5571cf9015039a7256753fd8c2a5424ed17e86b6ef9a0f8a26233d4afdba65087f910cf50acd27357a80efe31a9c5312b4d075fdb85b081bd444f037a65e97a5134f81ede4b6d04019929884ac1fc6d19f36ea770311ee7ba4df1eee273d5e298eef4c1dc23652492e9d0c0eec9bc38f43f02386e6dbd8b574acbfe66af73219a4005aa1d68af56ddaf51dbaf1ff309875e0ecd68ac08c45e6b91c4eb0f44e739908b64fe60f5d3f5b4ddc4e"]) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 1624.309614] FAULT_INJECTION: forcing a failure. [ 1624.309614] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.336593] CPU: 1 PID: 22518 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1624.344531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.353892] Call Trace: 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000001980)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a00)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001cc0)={&(0x7f00000000c0), 0xc, &(0x7f0000001c80)={&(0x7f0000001a40)={0x238, 0x0, 0xa10, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 1624.356504] dump_stack+0x1b2/0x281 [ 1624.360150] should_fail.cold+0x10a/0x149 [ 1624.364325] should_failslab+0xd6/0x130 [ 1624.368324] kmem_cache_alloc+0x28e/0x3c0 [ 1624.372580] get_empty_filp+0x86/0x3e0 [ 1624.376485] alloc_file+0x23/0x440 [ 1624.380052] hugetlb_file_setup+0x348/0x760 [ 1624.384664] ? hugetlbfs_fill_super+0x950/0x950 [ 1624.389368] SyS_mmap_pgoff+0x361/0x510 [ 1624.393368] ? find_mergeable_anon_vma+0x230/0x230 [ 1624.398342] ? __do_page_fault+0x159/0xad0 [ 1624.402587] ? do_syscall_64+0x4c/0x640 03:00:12 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x50301, 0x0) 03:00:12 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000d, 0xffffffffffffffff) [ 1624.406566] ? align_vdso_addr+0x250/0x250 [ 1624.410847] do_syscall_64+0x1d5/0x640 [ 1624.414760] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.419955] RIP: 0033:0x45e219 [ 1624.423145] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1624.430868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1624.438288] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1624.445736] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1624.453021] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000004 03:00:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x4, 0x3, 0x7, 0x80, 0x0, 0x7ff}, @x25={0x2, 0x3, 0x0, "a8736aee41d5b617a1bb34cdd636013128a9411adc6481938ee36d71e5d7c491ef74557afc8cb918554ae4874eab3aa214be956325a10579e6b1870d5dc70e1cca4d086f9268a6c9c7a2a4ee9d3631edc561ffd3ab2383001d8292933202ff0aef3802a258dad24c135a36d4146ee9ccef2295e5f77a1dba798e3d9d3af1c04fc1b9e9605647c40f17783cf1cdc0c4a7053eb58fe9b59f1163aa927cc6beedae7731a9b05a7af6dfb75680ca6124480a0b2b19a91ce15ab334ffa4876f81784d4dfb2173f3879aaf6e5e2de37535a12822fcce9e4c1a857694d9f63fb89fa713bedc56e103e7f54d6986c67ac131ccf9af826907fe96"}}, 0x103) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0xf6, 0x8, 0x20, 0x8, 0x0, 0xa5, 0x10140, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x2109, 0xffffffffffffff18, 0x81, 0x2, 0x4, 0x2462, 0x10d0}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xaa) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000380)="3f98d26c90ce37f8aba0d3814681804bc3a38593df03f58b066f71df1994b27604fa3a37565f10e895466041665636d3e55fb802e5a9bd2e8bf3439dcda174a8e74ede4e95f4c1014aea6bed8df3251c53467469b53d5a6d39e192dc341110a847d337206c718c24e1be2f66a40eca28a26dc930eb37c91fea0bee640aeabacf0be430043f8e3b8c2ec61db546be2ca1631bb7a3216010326b6bb89c824c47aca218bcf47c6678e65d71efd425e607d4df076773996f6c172ed74ddde08e9ddfcc744b4244fa8fa6a3d23c1757d3194768897238c2e0660ff500ba55b6119da1a49a82bb43f26d7caa2f352b49e12cb3a9c4a6a8", &(0x7f0000000480)=""/30, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 03:00:12 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x3, 0xc8, "88cf4c3fef3cb458"}}}, 0xe) [ 1624.460305] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:12 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x80, 0x3, 0x80000001, 0x0, 0x5, 0x1ff, 0x6, 0x1ff, 0x3, 0xe2d4}) r1 = accept4(r0, &(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001740)=0x80, 0x80800) getsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000001780)=""/142, &(0x7f0000001840)=0x8e) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000080)) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:12 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x5, 0x264b, 0x60, @mcast1, @local, 0x8, 0x10, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0xd3, 0x5, 0x7, 0x22, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x10, 0x8000, 0x7, 0x46}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f4, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x41}, 0x200440c4) 03:00:12 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"316f3ff5637ff389d22148ad8e60a969", 0x0, 0x0, {0xffffffff, 0xe4}, {0x9, 0x6}, 0xfffffffffffffff3, [0x7fff, 0x2, 0x1, 0x6, 0x1ff, 0x311, 0x77840fd5, 0x4, 0x0, 0x3, 0x3, 0x1, 0x1, 0x0, 0x5b8df9af, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{}, r1, 0x18, @inherit={0x80, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x8, {0x3f, 0xffffffff, 0x6, 0xf1f1, 0x6}, [0x80, 0x8000, 0x0, 0x2, 0x40, 0xc000000000000000, 0x9]}}, @devid}) 03:00:12 executing program 5 (fault-call:0 fault-nth:5): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:12 executing program 2: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1111) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x1004) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 03:00:13 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x8a, 0x7, 0x400}, {0x5, 0xff, 0x6, 0x82}, {0x9, 0x80, 0x20, 0x9}]}) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0xffffffffffffffff) 03:00:13 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xd37b) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x100000a, r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1624.596536] FAULT_INJECTION: forcing a failure. [ 1624.596536] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.636073] CPU: 1 PID: 22554 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1624.644103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.653624] Call Trace: [ 1624.656747] dump_stack+0x1b2/0x281 [ 1624.660399] should_fail.cold+0x10a/0x149 [ 1624.663726] audit: type=1326 audit(1611543613.082:100): auid=0 uid=0 gid=0 ses=4 pid=22566 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 [ 1624.664591] should_failslab+0xd6/0x130 [ 1624.664606] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1624.664620] apparmor_file_alloc_security+0x129/0x800 03:00:13 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0xffffffffffffffff) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x252, 0x5, 0x40}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000000040)=""/243, &(0x7f0000000140)=0xf3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, r2, 0x1a, @unused=[0x5, 0x32, 0x100000000, 0xfff], @subvolid=0x4}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) [ 1624.696816] security_file_alloc+0x66/0xa0 [ 1624.701070] ? selinux_is_enabled+0x5/0x50 [ 1624.705344] get_empty_filp+0x15c/0x3e0 [ 1624.709329] alloc_file+0x23/0x440 [ 1624.712913] hugetlb_file_setup+0x348/0x760 [ 1624.717245] ? hugetlbfs_fill_super+0x950/0x950 [ 1624.721935] SyS_mmap_pgoff+0x361/0x510 [ 1624.725930] ? find_mergeable_anon_vma+0x230/0x230 [ 1624.730868] ? __do_page_fault+0x159/0xad0 [ 1624.735114] ? do_syscall_64+0x4c/0x640 [ 1624.739099] ? align_vdso_addr+0x250/0x250 [ 1624.743344] do_syscall_64+0x1d5/0x640 03:00:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xcbd, 0x0, 0x6, 0x7}, {0x1, 0xdf, 0x6, 0x3f}]}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}}, 0x8080) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x100000c, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:13 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1624.747247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1624.752539] RIP: 0033:0x45e219 [ 1624.755736] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1624.763486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1624.770765] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1624.778147] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1624.785532] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000005 03:00:13 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) 03:00:13 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x4) 03:00:13 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028b97000250001000d96a316b970140cc32b6ab098a972baccaa2beb31f0c9c38fc47cb01238b4d31bc56910df6f5d875bf50c6c7ea692b03b4a56c30901fb755116525ff4ec72952ddfaf0de530fad71cbc4e41185f09aa1569094107c2c07101f57856c557b64ace0e8bd5f9fd650600bd91623d0a113d2f6c34e3043636ce254cbdad3699a8760700000058cbb5216ddf7410adaadee2266a1bbfc1045725"], 0x1c}, 0x1, 0x0, 0x0, 0x20004085}, 0x4010) [ 1624.792808] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:13 executing program 5 (fault-call:0 fault-nth:6): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:13 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x680200, 0x0) r1 = socket(0x23, 0x5, 0x5) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x104, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x1) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:13 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1624.901224] FAULT_INJECTION: forcing a failure. [ 1624.901224] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.913349] CPU: 1 PID: 22596 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1624.921254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1624.930615] Call Trace: [ 1624.933222] dump_stack+0x1b2/0x281 [ 1624.936860] should_fail.cold+0x10a/0x149 [ 1624.941026] should_failslab+0xd6/0x130 [ 1624.945104] kmem_cache_alloc+0x28e/0x3c0 [ 1624.949272] integrity_inode_get+0x47/0x260 [ 1624.953736] process_measurement+0x229/0xb20 [ 1624.958163] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1624.963284] ? aa_file_perm+0x304/0xab0 [ 1624.967396] ? aa_path_link+0x3a0/0x3a0 [ 1624.971416] ? apparmor_file_alloc_security+0x129/0x800 [ 1624.976780] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1624.982228] ? __lockdep_init_map+0x100/0x560 [ 1624.986859] ? common_file_perm+0x3ee/0x580 [ 1624.991192] ? apparmor_path_rmdir+0x200/0x200 [ 1624.995970] ima_file_mmap+0x4d/0x60 [ 1624.999683] ? apparmor_path_rmdir+0x200/0x200 [ 1625.004257] security_mmap_file+0x158/0x1a0 [ 1625.008712] vm_mmap_pgoff+0xbe/0x1a0 [ 1625.012588] ? vma_is_stack_for_current+0xb0/0xb0 [ 1625.017801] SyS_mmap_pgoff+0x390/0x510 [ 1625.021785] ? find_mergeable_anon_vma+0x230/0x230 [ 1625.026707] ? __do_page_fault+0x159/0xad0 [ 1625.030952] ? do_syscall_64+0x4c/0x640 [ 1625.034912] ? align_vdso_addr+0x250/0x250 [ 1625.039153] do_syscall_64+0x1d5/0x640 [ 1625.043040] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1625.048230] RIP: 0033:0x45e219 [ 1625.051417] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1625.059125] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1625.066381] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1625.073657] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1625.080916] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000006 [ 1625.088182] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:13 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:13 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x9, 0x2}, {0x1}}, @l2cap_conf_req={{0x4, 0x1, 0x8}, {0x4546, 0x8, [@l2cap_conf_mtu={0x1, 0x2, 0x3}]}}]}}, 0x1b) 03:00:13 executing program 0: sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x4) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000e, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, r0) 03:00:13 executing program 5 (fault-call:0 fault-nth:7): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:13 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34dcb997", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25010000000800020002000000080002000200000008000200020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) setfsuid(0xee00) 03:00:13 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7ce01d3ce373e9092f34027aab00b04762a03be9641143086b331ecbb59a659318ed1e300673d385e05c6bf10cd8df82c3e47b64ef48faaa7f4b9834d239d5817d28a897b111ae2e3f327470887c640085d41f648327abcac4ab46961c7bf516337d6be4878141d81e79c9d62fa0a138d46f3f30cfa01208f7ed70ffdd64e313dc3d852eadede9ee6ef7a5", @ANYRES16=r0, @ANYBLOB="000329bd7000fddbdf250700000005000100010000002600070073797374656d5f753a6f626a6563745f723a6c6f73745f666f756e645f743a7330000000140006006261746164763000000000000000000014000300fe880000000000000000000000000101"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c004) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000e, r1) [ 1625.495746] audit: type=1326 audit(1611543613.912:101): auid=0 uid=0 gid=0 ses=4 pid=22566 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x46107a code=0x0 03:00:14 executing program 3: syz_emit_vhci(0x0, 0xffffff24) 03:00:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'nr0\x00', @local}) [ 1625.551519] FAULT_INJECTION: forcing a failure. [ 1625.551519] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.584156] CPU: 1 PID: 22612 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1625.592091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.601451] Call Trace: [ 1625.604053] dump_stack+0x1b2/0x281 [ 1625.607692] should_fail.cold+0x10a/0x149 [ 1625.611869] should_failslab+0xd6/0x130 [ 1625.615853] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1625.620546] ima_calc_file_hash+0x3c6/0x780 [ 1625.624882] ? ima_alloc_tfm+0x9a/0xc0 [ 1625.628785] ? ima_calc_file_hash+0x14a/0x780 [ 1625.633300] ima_collect_measurement+0x39d/0x430 [ 1625.638067] ? ima_get_action+0x70/0x70 [ 1625.642084] ? vfs_getxattr_alloc+0xc8/0x2d0 [ 1625.646511] ? ima_get_cache_status+0x170/0x170 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001080)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001180)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{r0}, r1, 0x0, @inherit={0x80, &(0x7f00000010c0)={0x1, 0x7, 0x4, 0x39a4, {0x1, 0x8, 0xa, 0x2, 0x40000000401}, [0x4, 0x6, 0x1280000000, 0x8, 0x800, 0xdaf, 0x7]}}, @name="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"}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x70, r2, 0x200, 0x50a8, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) pkey_free(0xffffffffffffffff) r4 = accept4(r3, &(0x7f0000001340)=@nl=@unspec, &(0x7f00000013c0)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x4c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x880) openat$cgroup_ro(r3, &(0x7f0000001140)='cpuacct.usage_sys\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1625.651321] process_measurement+0x78b/0xb20 [ 1625.655745] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1625.660777] ? aa_file_perm+0x304/0xab0 [ 1625.664767] ? aa_path_link+0x3a0/0x3a0 [ 1625.668761] ? apparmor_file_alloc_security+0x129/0x800 [ 1625.674145] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1625.679640] ? __lockdep_init_map+0x100/0x560 [ 1625.684157] ? common_file_perm+0x3ee/0x580 [ 1625.688492] ? apparmor_path_rmdir+0x200/0x200 [ 1625.693083] ima_file_mmap+0x4d/0x60 [ 1625.696810] ? apparmor_path_rmdir+0x200/0x200 03:00:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'wg1\x00'}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000140)={{r1}, 0x0, 0x8, @inherit={0x80, &(0x7f00000000c0)={0x1, 0x7, 0x4, 0x1ff, {0x18, 0x40, 0xffffffffffff8000, 0x5, 0xecd9}, [0x5, 0x0, 0x4, 0x3d, 0x6, 0xfffffffffffff453, 0x8]}}, @devid}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 1625.701399] security_mmap_file+0x158/0x1a0 [ 1625.705753] vm_mmap_pgoff+0xbe/0x1a0 [ 1625.709597] ? vma_is_stack_for_current+0xb0/0xb0 [ 1625.714479] SyS_mmap_pgoff+0x390/0x510 [ 1625.718503] ? find_mergeable_anon_vma+0x230/0x230 [ 1625.723446] ? __do_page_fault+0x159/0xad0 [ 1625.727690] ? do_syscall_64+0x4c/0x640 [ 1625.731671] ? align_vdso_addr+0x250/0x250 [ 1625.735914] do_syscall_64+0x1d5/0x640 [ 1625.739823] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1625.745022] RIP: 0033:0x45e219 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:14 executing program 4: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee01) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) 03:00:14 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x0, 0x40, 0x8, @private1, @local, 0x7, 0x40, 0x8, 0x3ff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x80010, r1, 0x9) [ 1625.748211] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1625.755957] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1625.763238] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1625.770523] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1625.777803] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000007 [ 1625.785091] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:14 executing program 5 (fault-call:0 fault-nth:8): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:14 executing program 3: syz_emit_vhci(0x0, 0x19) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/115) socketpair(0x29, 0x2, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000140)={'bridge_slave_0\x00', @ifru_data=&(0x7f0000000100)="22ee4fded11fd18023ffe835e527becfa97b5a87650f71c3152ca1607192b02f"}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd7}, "c87080ff96101f37d4a168853b25ccec1fa9140e24bc0f58b1ce5afe68f7cb2ac90070b376e90fa9af22d7b8ea9c52a8182b3717de43c9de6aa5bcfefedb9429347ed328a9b22f0dd9f91b0789442b61a8f97fb542ee726008a34f034ba8e2e5ffb024352149a5cde0dc42e952bab3c1083b78684b24d592b91ac66222c03bfdde3dc327daa1488890814af633a75c10abef462624c29f03f0e7e69a24699ee52928ce2ea605867f9817a89f43dc9bf956c435dc6f7049961aa8adffa51c51918057a90a729719b786fe6572ee35b9c17c591a46ae0f5a"}, 0xdb) [ 1625.822080] audit: type=1800 audit(1611543614.242:102): pid=22612 uid=0 auid=0 ses=4 op="collect_data" cause="failed" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=598944 res=0 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x84b) 03:00:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) pkey_free(0xffffffffffffffff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:14 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1625.939059] FAULT_INJECTION: forcing a failure. [ 1625.939059] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.961359] CPU: 1 PID: 22643 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1625.969285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1625.978963] Call Trace: [ 1625.981566] dump_stack+0x1b2/0x281 [ 1625.985211] should_fail.cold+0x10a/0x149 03:00:14 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:14 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) [ 1625.989383] should_failslab+0xd6/0x130 [ 1625.993378] __kmalloc_track_caller+0x2bc/0x400 [ 1625.998091] ? ima_collect_measurement+0x244/0x430 [ 1626.003175] krealloc+0x57/0xc0 [ 1626.006470] ima_collect_measurement+0x244/0x430 [ 1626.011241] ? ima_get_action+0x70/0x70 [ 1626.015236] ? vfs_getxattr_alloc+0xc8/0x2d0 [ 1626.019678] ? ima_get_cache_status+0x170/0x170 [ 1626.024362] process_measurement+0x78b/0xb20 [ 1626.028783] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1626.033818] ? aa_file_perm+0x304/0xab0 03:00:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc400, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"4ae9f1e5aa746cac3e684a35a83adadf", 0x0, 0x0, {0x6, 0x2}, {0x3b3c952a, 0x3}, 0x1c0000000, [0x2, 0x8001, 0xcaaa, 0xffffffffffffffd0, 0x3, 0x3, 0x6, 0x86, 0x7, 0x6, 0x3, 0xffffffffffff1eb2, 0x8000, 0xfff, 0xffffffff, 0x4]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:14 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x95, 0x50000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="08002dbd7000fddbdf25040000000900030073797a30000000000900030073797a3100000000140002007465616d5f736c6176655f30000000001400020064756d6d7930000000000000000000001400020076657468305f746f5f7465616d000000050004000200000005000400020000000900010073797a32000000000900010073797a3200000000019f8eb6a8781c85bf0e907b03b03bc03c424ebe06254111e2b90da9d2ed374064a1a5d202f3fb4f2c20659a81e5518a9062b1dcad800c2a71d8a412789fe7e21a9edc25008642caa79bdbca020ce187308af5699c4d70823916fbfa4d0725039df41b1365efe7d0c2ee424a6a97"], 0x90}}, 0x40840) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) [ 1626.037891] ? aa_path_link+0x3a0/0x3a0 [ 1626.041878] ? apparmor_file_alloc_security+0x129/0x800 [ 1626.047256] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1626.052723] ? __lockdep_init_map+0x100/0x560 [ 1626.057232] ? common_file_perm+0x3ee/0x580 [ 1626.061567] ? apparmor_path_rmdir+0x200/0x200 [ 1626.066250] ima_file_mmap+0x4d/0x60 [ 1626.069974] ? apparmor_path_rmdir+0x200/0x200 [ 1626.074574] security_mmap_file+0x158/0x1a0 [ 1626.078948] vm_mmap_pgoff+0xbe/0x1a0 [ 1626.082760] ? vma_is_stack_for_current+0xb0/0xb0 03:00:14 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0xffffffffffffffff) [ 1626.087625] SyS_mmap_pgoff+0x390/0x510 [ 1626.091704] ? find_mergeable_anon_vma+0x230/0x230 [ 1626.096646] ? __do_page_fault+0x159/0xad0 [ 1626.100917] ? do_syscall_64+0x4c/0x640 [ 1626.104899] ? align_vdso_addr+0x250/0x250 [ 1626.109162] do_syscall_64+0x1d5/0x640 [ 1626.113057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1626.118266] RIP: 0033:0x45e219 [ 1626.121455] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1626.129342] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 03:00:14 executing program 4: socketpair(0x2a, 0x4, 0x9, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:14 executing program 3: syz_emit_vhci(0x0, 0x19) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x28, &(0x7f0000000040)}, 0x10) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioprio_get$pid(0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0xff}, [@jmp={0x5, 0x1, 0x5, 0x1, 0x7, 0x4, 0x10}, @alu={0x4, 0x1, 0x6, 0xc05ad68b3096c10d, 0xa, 0x80, 0x8}, @alu={0x7, 0x0, 0x0, 0xa, 0x3, 0xfffffffffffffff0, 0x10}, @exit, @jmp={0x5, 0x0, 0x7, 0xa, 0x3, 0x50}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0xd, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x2, 0x11, 0x9}, 0x10, 0x0, r0}, 0x78) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="53d10000000000000b"], 0x9) [ 1626.136824] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1626.144099] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1626.151398] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000008 [ 1626.158867] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c 03:00:14 executing program 5 (fault-call:0 fault-nth:9): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:14 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_emit_vhci(0x0, 0x19) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2810400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:semanage_read_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @multicast2}}]}, 0xe0}}, 0x0) 03:00:14 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x2010, r0, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x5, 0x4, 0x3f, 0x0, 0x40, 0x41040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x6, @perf_config_ext={0x10001, 0x4}, 0x400, 0x7, 0x5, 0x0, 0x4, 0xff, 0x9}, 0x0, 0x2, r0, 0xa) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffffffd) 03:00:14 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0xbd70) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:14 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000001, r0) pkey_mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1000008, 0xffffffffffffffff) [ 1626.222290] audit: type=1800 audit(1611543614.642:103): pid=22643 uid=0 auid=0 ses=4 op="collect_data" cause="failed" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=598970 res=0 [ 1626.294949] FAULT_INJECTION: forcing a failure. [ 1626.294949] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.337814] CPU: 0 PID: 22683 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1626.345743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.355102] Call Trace: [ 1626.357700] dump_stack+0x1b2/0x281 [ 1626.361335] should_fail.cold+0x10a/0x149 [ 1626.365498] should_failslab+0xd6/0x130 [ 1626.369487] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1626.374168] ima_calc_file_hash+0x3c6/0x780 [ 1626.378511] ? ima_alloc_tfm+0x9a/0xc0 [ 1626.382418] ? ima_calc_file_hash+0x14a/0x780 [ 1626.386930] ima_collect_measurement+0x39d/0x430 [ 1626.391708] ? ima_get_action+0x70/0x70 [ 1626.395697] ? vfs_getxattr_alloc+0xc8/0x2d0 [ 1626.400143] ? ima_get_cache_status+0x170/0x170 [ 1626.404832] process_measurement+0x78b/0xb20 [ 1626.409267] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1626.414308] ? aa_file_perm+0x304/0xab0 [ 1626.418303] ? aa_path_link+0x3a0/0x3a0 [ 1626.422300] ? apparmor_file_alloc_security+0x129/0x800 [ 1626.427683] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1626.433264] ? __lockdep_init_map+0x100/0x560 [ 1626.437778] ? common_file_perm+0x3ee/0x580 [ 1626.442130] ? apparmor_path_rmdir+0x200/0x200 [ 1626.446729] ima_file_mmap+0x4d/0x60 [ 1626.450463] ? apparmor_path_rmdir+0x200/0x200 [ 1626.455060] security_mmap_file+0x158/0x1a0 [ 1626.459488] vm_mmap_pgoff+0xbe/0x1a0 [ 1626.463318] ? vma_is_stack_for_current+0xb0/0xb0 [ 1626.468186] SyS_mmap_pgoff+0x390/0x510 [ 1626.472195] ? find_mergeable_anon_vma+0x230/0x230 [ 1626.477162] ? __do_page_fault+0x159/0xad0 [ 1626.481412] ? do_syscall_64+0x4c/0x640 03:00:14 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf25060000001400018008000600000000000800060004000000"], 0x28}, 0x1, 0x0, 0x0, 0x200400c0}, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="ac000001", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250400000008000400ffffffff14000300ff01000000000000000000000000000114000200fc010000000000000000000000000000080004007f00000114000300fc0000000000000000000000000000011400030020010000000000000000000000000001080004000a01010114000300fc0200000000000000000000000000011400020020010000000000000000000000000002"], 0xa4}, 0x1, 0x0, 0x0, 0x810}, 0x8000) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:14 executing program 3: syz_emit_vhci(0x0, 0x19) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x7) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r1) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, r2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:14 executing program 3: syz_emit_vhci(0x0, 0x19) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') 03:00:14 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000005, r0) 03:00:14 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x200042) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4, 0x0, 0x7, 0x31a, 0xad, 0x0, 0x9, 0x729, 0x1}) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x2, 0x3, 0x30, 0x3, 0x0, 0x0, 0x80000, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2cf, 0x0, @perf_bp={&(0x7f0000000080)}, 0x5, 0xfffffffffffffffd, 0x800, 0x6, 0x0, 0x3f, 0x8000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/57) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xff) [ 1626.485396] ? align_vdso_addr+0x250/0x250 [ 1626.489646] do_syscall_64+0x1d5/0x640 [ 1626.493565] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1626.498766] RIP: 0033:0x45e219 [ 1626.501961] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1626.509791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1626.517103] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1626.524421] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 03:00:15 executing program 5 (fault-call:0 fault-nth:10): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:15 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff25) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="63bc53f29260717ea8c93b7c85086b84fc5d8fd8633a4019a0408e0c2e7de3a4514d8d36de00dc1b6c480cadaa6e66a28c6687d54c3c91bac93b61515c120d43950f09430d4c6c5b8883463914825a17ab9d6c8da5d59912a48b4b5e4c63c1bc5129b262a772b091a450cdb4681c897c7256d040bc20ee87adfa438bf2c18d0edcc7cd2d62", &(0x7f00000000c0)=""/161, &(0x7f0000000180), &(0x7f00000001c0)="4e689bff3f75d2fa9af7b79bd7a2aac17caacbfae1c945973099510865092abdee7d2a1a33963baa468dca26cf5d919762c1f2231ce8ba386f6c2e3a363fdac9aa996644", 0x5a2, r0, 0x4}, 0x38) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x8000, 0x0) write$sysctl(r1, &(0x7f0000000280)='2\x00', 0x2) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x284041) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x1f, 0x6, 0x7da, 0x5, 0x4, 0x4, 0x3, 0x2, 0xdee, 0x5}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x282000, 0x0) [ 1626.531787] R10: 0000000003ffffff R11: 0000000000000246 R12: 0000000000000009 [ 1626.539063] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1626.548343] audit: type=1800 audit(1611543614.972:104): pid=22683 uid=0 auid=0 ses=4 op="collect_data" cause="failed" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=599629 res=0 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) accept4(r0, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x800) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:15 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:15 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff6e) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10a}, @l2cap_cid_signaling={{0x106}, [@l2cap_info_rsp={{0xb, 0xa5, 0x58}, {0xca2, 0x7, "844435d6054ba1e81df51c2501cd17181f95c50b591ed7cd46cc50fb027e52c9f222c4f10263f0d02207da670e175c8f22b4393aeca606f4f0aa6345f36e1ed52fb9f44513e2c5e5fab706f23b0ecf2cd8039038"}}, @l2cap_info_rsp={{0xb, 0xa, 0x69}, {0x2, 0x0, "2f32101756c2e5b2c80204bac48d71ec5fd800fda8fa69849a52a1462457a73a3c73c23906936c95db12fc7a0709498f39ce63851c0ffdb8638a307f3b6a3c85cf65b377344be6de3812b74a1bbc5663316ad77eb846742f9f530da7bf4c37ddcd118bbcd4"}}, @l2cap_move_chan_rsp={{0xf, 0x3, 0x4}, {0xfffd, 0x9}}, @l2cap_cmd_rej_unk={{0x1, 0xe9, 0x2}, {0x4}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x0, 0xfff}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x3ff, 0x4}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xff00, 0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7f, 0x2}, {0x2000}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x7, 0x3}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xc, 0x2}}]}}, 0x10f) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1626.679564] FAULT_INJECTION: forcing a failure. [ 1626.679564] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.724831] CPU: 1 PID: 22721 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1626.732785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.741157] Bluetooth: Unexpected continuation frame (len 266) [ 1626.742228] Call Trace: [ 1626.750835] dump_stack+0x1b2/0x281 [ 1626.754478] should_fail.cold+0x10a/0x149 [ 1626.758668] should_failslab+0xd6/0x130 [ 1626.762663] __kmalloc+0x2c1/0x400 [ 1626.766214] ? ima_alloc_init_template+0x63/0x4e0 [ 1626.771117] ima_alloc_init_template+0x63/0x4e0 [ 1626.775894] ima_store_measurement+0x165/0x420 [ 1626.780506] ? ima_collect_measurement+0x430/0x430 [ 1626.785449] ? ima_d_path+0xfe/0x1e0 [ 1626.789183] ? ima_d_path+0xa6/0x1e0 [ 1626.792910] process_measurement+0x8db/0xb20 [ 1626.797333] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1626.802381] ? aa_file_perm+0x304/0xab0 [ 1626.806440] ? aa_path_link+0x3a0/0x3a0 [ 1626.810404] ? apparmor_file_alloc_security+0x129/0x800 [ 1626.815865] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1626.821313] ? __lockdep_init_map+0x100/0x560 [ 1626.825927] ? common_file_perm+0x3ee/0x580 [ 1626.830250] ? apparmor_path_rmdir+0x200/0x200 [ 1626.834839] ima_file_mmap+0x4d/0x60 [ 1626.838540] ? apparmor_path_rmdir+0x200/0x200 [ 1626.843106] security_mmap_file+0x158/0x1a0 [ 1626.847466] vm_mmap_pgoff+0xbe/0x1a0 [ 1626.851283] ? vma_is_stack_for_current+0xb0/0xb0 [ 1626.856121] SyS_mmap_pgoff+0x390/0x510 [ 1626.860084] ? find_mergeable_anon_vma+0x230/0x230 [ 1626.865037] ? __do_page_fault+0x159/0xad0 [ 1626.869265] ? do_syscall_64+0x4c/0x640 [ 1626.873244] ? align_vdso_addr+0x250/0x250 [ 1626.877483] do_syscall_64+0x1d5/0x640 [ 1626.881375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1626.886597] RIP: 0033:0x45e219 [ 1626.889783] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1626.897588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1626.904856] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1626.912122] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 03:00:15 executing program 3: syz_emit_vhci(0x0, 0x75) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_reconf_req={{0x19, 0xf, 0xa}, {0xf66, 0x1, [0x4, 0x4, 0x7]}}}}, 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x28, 0xc8, 0x7}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04332eac0000d8d617ee800000"], 0xd) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/77, 0x4d}, 0x120) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x44a542) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r0 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) 03:00:15 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r0, 0x4) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4c0000, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0xffffffffffffffff) 03:00:15 executing program 5 (fault-call:0 fault-nth:11): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) [ 1626.919493] R10: 0000000003ffffff R11: 0000000000000246 R12: 000000000000000a [ 1626.926764] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1626.942019] audit: type=1804 audit(1611543615.362:105): pid=22721 uid=0 auid=0 ses=4 op="add_template_measure" cause="ENOMEM" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=600085 res=0 03:00:15 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10001, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x2, 0x7, 0x3}) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x8, 0x5, 0x1f}) 03:00:15 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x36038542, 0xc54, &(0x7f0000000040)=0x20}) [ 1627.041787] FAULT_INJECTION: forcing a failure. [ 1627.041787] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.064705] CPU: 1 PID: 22752 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1627.072631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.082010] Call Trace: [ 1627.084715] dump_stack+0x1b2/0x281 [ 1627.088352] should_fail.cold+0x10a/0x149 [ 1627.092509] should_failslab+0xd6/0x130 [ 1627.096497] __kmalloc+0x2c1/0x400 [ 1627.100047] ? ima_write_template_field_data+0x37/0x180 [ 1627.105427] ? unwind_get_return_address+0x51/0x90 [ 1627.110370] ima_write_template_field_data+0x37/0x180 [ 1627.115572] ima_eventdigest_init_common+0xd0/0x1b0 [ 1627.120593] ? ima_write_template_field_data+0x180/0x180 [ 1627.126053] ? kasan_slab_free+0x12d/0x1a0 [ 1627.130308] ? trace_raw_output_rcu_utilization+0x10/0xb0 [ 1627.135888] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1627.140918] ? __kmalloc+0x3a4/0x400 [ 1627.144636] ? ima_alloc_init_template+0x63/0x4e0 [ 1627.149490] ima_alloc_init_template+0x249/0x4e0 [ 1627.154270] ima_store_measurement+0x165/0x420 [ 1627.158874] ? ima_collect_measurement+0x430/0x430 [ 1627.163812] ? ima_d_path+0xfe/0x1e0 [ 1627.167547] ? ima_d_path+0xa6/0x1e0 [ 1627.171276] process_measurement+0x8db/0xb20 [ 1627.175703] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1627.180740] ? aa_file_perm+0x304/0xab0 [ 1627.184728] ? aa_path_link+0x3a0/0x3a0 [ 1627.188714] ? apparmor_file_alloc_security+0x129/0x800 [ 1627.194088] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1627.199554] ? __lockdep_init_map+0x100/0x560 [ 1627.204065] ? common_file_perm+0x3ee/0x580 [ 1627.208396] ? apparmor_path_rmdir+0x200/0x200 [ 1627.212990] ima_file_mmap+0x4d/0x60 [ 1627.216717] ? apparmor_path_rmdir+0x200/0x200 [ 1627.221309] security_mmap_file+0x158/0x1a0 [ 1627.225642] vm_mmap_pgoff+0xbe/0x1a0 [ 1627.229450] ? vma_is_stack_for_current+0xb0/0xb0 [ 1627.234402] SyS_mmap_pgoff+0x390/0x510 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"2700992450c9729b9e07ddfc2603ac0c", r1, 0x0, {0x8, 0x10001}, {0xfffffffffffffff9, 0xff}, 0x10000, [0xffff, 0x4, 0xacf, 0x1, 0x10001, 0x5, 0x9, 0x10001, 0x2, 0xffffffffffff3be1, 0x2671d7fc, 0x80, 0x1000, 0x9, 0x6, 0x6]}) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000010, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x1) pkey_free(r2) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, 0xffffffffffffffff, 0x25931cff) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 1627.238394] ? find_mergeable_anon_vma+0x230/0x230 [ 1627.243329] ? __do_page_fault+0x159/0xad0 [ 1627.247569] ? do_syscall_64+0x4c/0x640 [ 1627.251563] ? align_vdso_addr+0x250/0x250 [ 1627.255804] do_syscall_64+0x1d5/0x640 [ 1627.259790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1627.264983] RIP: 0033:0x45e219 [ 1627.268159] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1627.275860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1627.283211] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 03:00:15 executing program 5 (fault-call:0 fault-nth:12): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:15 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xfffffffffffffe37) syz_emit_vhci(0x0, 0x19) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x22903, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x49c2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={r2, 0x6, 0x3, 0x84, 0x4, 0x3, 0x6, 0x153b66a9, 0xffff, 0x1, 0xa33, 0x9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000004000000090000000000000000"]) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 03:00:15 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1627.290474] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1627.297772] R10: 0000000003ffffff R11: 0000000000000246 R12: 000000000000000b [ 1627.305073] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1627.319569] audit: type=1804 audit(1611543615.742:106): pid=22752 uid=0 auid=0 ses=4 op="add_template_measure" cause="ENOMEM" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=600119 res=0 03:00:15 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:15 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) munlockall() r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') 03:00:15 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffc27) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 03:00:15 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x7}, 0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x3) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0xfc, 0x3, 0x5, 0x0, 0x0, 0x7, 0x10000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1c0000, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x20, 0x0, 0x6, 0x1, 0x20, 0x63}, r0, 0x10, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1627.434288] FAULT_INJECTION: forcing a failure. [ 1627.434288] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.453373] CPU: 1 PID: 22792 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1627.461304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.471137] Call Trace: [ 1627.473745] dump_stack+0x1b2/0x281 [ 1627.477425] should_fail.cold+0x10a/0x149 03:00:15 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x5, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1627.481601] should_failslab+0xd6/0x130 [ 1627.485595] __kmalloc+0x2c1/0x400 [ 1627.489148] ? ima_alloc_init_template+0x63/0x4e0 [ 1627.494120] ima_alloc_init_template+0x63/0x4e0 [ 1627.499368] ima_store_measurement+0x165/0x420 [ 1627.503983] ? ima_collect_measurement+0x430/0x430 [ 1627.508925] ? ima_d_path+0xfe/0x1e0 [ 1627.512661] ? ima_d_path+0xa6/0x1e0 [ 1627.516388] process_measurement+0x8db/0xb20 [ 1627.520816] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1627.526015] ? aa_file_perm+0x304/0xab0 [ 1627.530011] ? aa_path_link+0x3a0/0x3a0 [ 1627.534011] ? apparmor_file_alloc_security+0x129/0x800 [ 1627.539394] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1627.544860] ? __lockdep_init_map+0x100/0x560 [ 1627.549368] ? common_file_perm+0x3ee/0x580 [ 1627.553712] ? apparmor_path_rmdir+0x200/0x200 [ 1627.558320] ima_file_mmap+0x4d/0x60 [ 1627.562052] ? apparmor_path_rmdir+0x200/0x200 [ 1627.566650] security_mmap_file+0x158/0x1a0 [ 1627.570995] vm_mmap_pgoff+0xbe/0x1a0 [ 1627.574816] ? vma_is_stack_for_current+0xb0/0xb0 [ 1627.579666] SyS_mmap_pgoff+0x390/0x510 [ 1627.583730] ? find_mergeable_anon_vma+0x230/0x230 [ 1627.588663] ? __do_page_fault+0x159/0xad0 [ 1627.592904] ? do_syscall_64+0x4c/0x640 [ 1627.596871] ? align_vdso_addr+0x250/0x250 [ 1627.601116] do_syscall_64+0x1d5/0x640 [ 1627.605018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1627.610213] RIP: 0033:0x45e219 [ 1627.613492] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1627.621199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 03:00:16 executing program 5 (fault-call:0 fault-nth:13): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:16 executing program 4: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r0 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x0, @remote}, &(0x7f0000000280)=0x80, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0) 03:00:16 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x300000a, 0x10, 0xffffffffffffffff, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:16 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffd3f) r0 = socket(0x10, 0xa, 0x9) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x313, 0x3, 0x1, 0x1f, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0xa, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xaae, {0x29, 0x7f, 0x9, 0x100000000, 0x6}, [0x4]}}, @subvolid=0x7}) 03:00:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f0000000040)="a3610410ed2d6f12378d20b0066a274d0dd7482bd9baf4bbe0e9f602bde8f16c6723b76852274f905406a2692fc611271fed7771352bdc05886f27e1885fcc43753b0704586ddbf2c02108ccd67ca69981ed80035ca8d9486ac021648eb1ececb36e6fa7", &(0x7f00000000c0)=""/4096}, 0x20) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000011c0)={0x5302}, 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000001180)='cgroup.type\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_devices(r1, &(0x7f0000001100)='devices.deny\x00', 0x2, 0x0) [ 1627.628561] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1627.635826] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1627.643193] R10: 0000000003ffffff R11: 0000000000000246 R12: 000000000000000c [ 1627.650462] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1627.666635] audit: type=1804 audit(1611543616.082:107): pid=22792 uid=0 auid=0 ses=4 op="add_template_measure" cause="ENOMEM" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=600146 res=0 03:00:16 executing program 4: memfd_create(&(0x7f0000000000)='/**-R:\x00', 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x3f1382, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:16 executing program 3: syz_emit_vhci(0x0, 0x19) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') [ 1627.754724] FAULT_INJECTION: forcing a failure. [ 1627.754724] name failslab, interval 1, probability 0, space 0, times 0 03:00:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) 03:00:16 executing program 0: rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000240)="c4a1c56b1c76400fa864410f0f41eabb3e6766460f71f29e450f48ecc461797e90d10000008f4978822a643e3636670fc7a1c60000000f380a4508c421b573f180", 0xc8000004, &(0x7f0000000080)="2e402a93912d000064f30fa7c0f20f38f1c70f861dc80000c483353893b9a861889965933e65470f38087cee0c47c0f41e66ddb509000000", {[0x101]}}, &(0x7f00000001c0)={&(0x7f0000000100)="2ef3460f1eedf7eec4e24547490836ed660f38f6fd0f38f6a2ea0500002666440f3a145b0d0bc02205c4e279181ac4615de08700000000", 0x0, &(0x7f0000000140)="c4a259050c5ac4a1415e75b8c4e1b157bd49000000c4c1bd73fa00c421c916a46b04000000f33e366741dbdd3e4523a2040457a6c4c279db69fec4a31d46ee12c4812d5de6"}, 0x8, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"0dcf2fba173240975eb1644669958cfd", 0x0, 0x0, {0x1, 0xffffffb6}, {0x1, 0x3}, 0xfa87, [0x2, 0xffff, 0x8, 0x7, 0x7, 0x400, 0x8, 0x5, 0x1c195cb3, 0xffffffffffffffff, 0x7, 0xa746, 0x1, 0xfffffffffffffff7, 0x2, 0x80]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"472d55cf3ee8a4cb2c2d6c572c66ae15", r2, r3, {0x7, 0x5}, {0xfffffffffffffffb, 0x9b}, 0x80, [0x1b, 0x8001, 0x0, 0x61f, 0x401, 0x100000000, 0x8, 0x8, 0x5, 0x2, 0x7fffffff, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0x5]}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1627.795192] CPU: 1 PID: 22818 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1627.803143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1627.812511] Call Trace: [ 1627.815116] dump_stack+0x1b2/0x281 [ 1627.818750] should_fail.cold+0x10a/0x149 [ 1627.822907] should_failslab+0xd6/0x130 [ 1627.826898] __kmalloc+0x2c1/0x400 [ 1627.830450] ? ima_write_template_field_data+0xd1/0x180 [ 1627.835821] ima_write_template_field_data+0xd1/0x180 03:00:16 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]}) [ 1627.841027] ima_alloc_init_template+0x249/0x4e0 [ 1627.845797] ima_store_measurement+0x165/0x420 [ 1627.850387] ? ima_collect_measurement+0x430/0x430 [ 1627.855328] ? ima_d_path+0xfe/0x1e0 [ 1627.859087] ? ima_d_path+0xa6/0x1e0 [ 1627.862810] process_measurement+0x8db/0xb20 [ 1627.867263] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1627.872291] ? aa_file_perm+0x304/0xab0 [ 1627.876300] ? aa_path_link+0x3a0/0x3a0 [ 1627.880285] ? apparmor_file_alloc_security+0x129/0x800 [ 1627.885683] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1627.891148] ? __lockdep_init_map+0x100/0x560 [ 1627.895676] ? common_file_perm+0x3ee/0x580 [ 1627.900003] ? apparmor_path_rmdir+0x200/0x200 [ 1627.904612] ima_file_mmap+0x4d/0x60 [ 1627.908337] ? apparmor_path_rmdir+0x200/0x200 [ 1627.912926] security_mmap_file+0x158/0x1a0 [ 1627.917276] vm_mmap_pgoff+0xbe/0x1a0 [ 1627.921095] ? vma_is_stack_for_current+0xb0/0xb0 [ 1627.925951] SyS_mmap_pgoff+0x390/0x510 [ 1627.929939] ? find_mergeable_anon_vma+0x230/0x230 [ 1627.934894] ? __do_page_fault+0x159/0xad0 [ 1627.939132] ? do_syscall_64+0x4c/0x640 [ 1627.943110] ? align_vdso_addr+0x250/0x250 [ 1627.947347] do_syscall_64+0x1d5/0x640 [ 1627.951274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1627.956468] RIP: 0033:0x45e219 [ 1627.959655] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1627.967392] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1627.974663] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1627.981942] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 03:00:16 executing program 5 (fault-call:0 fault-nth:14): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:16 executing program 3: syz_emit_vhci(0x0, 0x19) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @remote}) 03:00:16 executing program 2: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:16 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000), &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000009, r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc000, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) [ 1627.989201] R10: 0000000003ffffff R11: 0000000000000246 R12: 000000000000000d [ 1627.996467] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1628.005960] audit: type=1804 audit(1611543616.422:108): pid=22818 uid=0 auid=0 ses=4 op="add_template_measure" cause="ENOMEM" comm="syz-executor.5" name="anon_hugepage" dev="hugetlbfs" ino=600161 res=0 03:00:16 executing program 3: syz_emit_vhci(0x0, 0xfffffe5f) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:00:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x0, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc}, @MPTCP_PM_ATTR_SUBFLOWS={0x0, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000085) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) connect$caif(r3, &(0x7f0000000000)=@dbg={0x25, 0x81, 0x80}, 0x18) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2010, r0, 0x9) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x30f, 0x9, 0x8, 0x8, 0x1f, @random="d0a28099e622"}, 0x10) 03:00:16 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:16 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x401, 0x18}, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000180)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000100)={0x0, 0x3, 0x8, 0x5, {0x22, 0x4, 0x3, 0x8001, 0x3f}, [0x7e, 0xf0, 0x9]}}, @devid}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:00:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) connect$caif(0xffffffffffffffff, &(0x7f0000000000), 0x18) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1628.183724] FAULT_INJECTION: forcing a failure. [ 1628.183724] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.216746] CPU: 0 PID: 22858 Comm: syz-executor.5 Not tainted 4.14.217-syzkaller #0 [ 1628.224714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1628.234076] Call Trace: [ 1628.236683] dump_stack+0x1b2/0x281 [ 1628.240324] should_fail.cold+0x10a/0x149 [ 1628.244480] should_failslab+0xd6/0x130 [ 1628.248691] __kmalloc+0x2c1/0x400 [ 1628.252217] ? crypto_create_tfm+0x79/0x2d0 [ 1628.256522] ? up_read+0x17/0x30 [ 1628.260048] crypto_create_tfm+0x79/0x2d0 [ 1628.264205] crypto_alloc_tfm+0x11a/0x250 [ 1628.268336] ima_alloc_tfm+0x86/0xc0 [ 1628.272031] ima_calc_field_array_hash+0x47/0xb0 [ 1628.276767] ima_store_template+0xf5/0x220 [ 1628.281010] ? ima_alloc_init_template+0x4e0/0x4e0 [ 1628.285920] ? ima_alloc_init_template+0x385/0x4e0 [ 1628.290837] ima_store_measurement+0x189/0x420 [ 1628.295400] ? ima_collect_measurement+0x430/0x430 [ 1628.300310] ? ima_d_path+0xfe/0x1e0 [ 1628.304023] ? ima_d_path+0xa6/0x1e0 [ 1628.307728] process_measurement+0x8db/0xb20 [ 1628.312155] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1628.317248] ? aa_file_perm+0x304/0xab0 [ 1628.321282] ? aa_path_link+0x3a0/0x3a0 [ 1628.325262] ? apparmor_file_alloc_security+0x129/0x800 [ 1628.330619] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1628.336156] ? __lockdep_init_map+0x100/0x560 [ 1628.340639] ? common_file_perm+0x3ee/0x580 [ 1628.344955] ? apparmor_path_rmdir+0x200/0x200 [ 1628.349526] ima_file_mmap+0x4d/0x60 [ 1628.353238] ? apparmor_path_rmdir+0x200/0x200 [ 1628.357823] security_mmap_file+0x158/0x1a0 [ 1628.362132] vm_mmap_pgoff+0xbe/0x1a0 [ 1628.365919] ? vma_is_stack_for_current+0xb0/0xb0 [ 1628.370789] SyS_mmap_pgoff+0x390/0x510 [ 1628.374766] ? find_mergeable_anon_vma+0x230/0x230 [ 1628.379680] ? __do_page_fault+0x159/0xad0 [ 1628.384027] ? do_syscall_64+0x4c/0x640 [ 1628.388016] ? align_vdso_addr+0x250/0x250 [ 1628.392235] do_syscall_64+0x1d5/0x640 [ 1628.396240] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1628.401414] RIP: 0033:0x45e219 [ 1628.404596] RSP: 002b:00007f3a4b133c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1628.412301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1628.419576] RDX: 0000000000000007 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 1628.426878] RBP: 00007f3a4b133ca0 R08: ffffffffffffffff R09: 0000000000000000 [ 1628.434243] R10: 0000000003ffffff R11: 0000000000000246 R12: 000000000000000e [ 1628.441731] R13: 00007ffd0c787bcf R14: 00007f3a4b1349c0 R15: 000000000119bf8c [ 1628.469243] ima: Can not allocate sha1 (reason: -12) 03:00:16 executing program 5 (fault-call:0 fault-nth:15): mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:16 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:16 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:16 executing program 3: syz_emit_vhci(0x0, 0x19) socket(0x2b, 0x1, 0x0) 03:00:16 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2240002, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@obj_user={'obj_user'}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) [ 1628.474777] audit: type=1804 audit(1611543616.892:109): pid=22858 uid=0 auid=0 ses=4 op="add_template_measure" cause="hashing_error" comm="syz-executor.5" name="ima-ng" dev="hugetlbfs" ino=599877 res=0 03:00:16 executing program 2: gettid() r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000000)="e0e2805df05a4bde", 0x8) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000006, 0x100810, 0xffffffffffffffff, 0x2) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) 03:00:16 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x58}}, 0x4000000) 03:00:17 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff68) syz_extract_tcp_res(&(0x7f0000000000), 0x401, 0x9) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x86000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$can_raw(0x1d, 0x3, 0x1) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:17 executing program 5: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x3ffffff, 0xffffffffffffffff, 0xfff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x1000000c) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)={'batadv0\x00'}) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x28202, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x3, 0x7, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x1, 0xc8, 0x1ff}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40054}, 0x4041) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x4, 0x7f, 0x3f, 0x3, 0x0, @mcast2, @remote, 0x10, 0x700, 0x2a5c2da2, 0xef23}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x1, &(0x7f0000000140)=@raw=[@alu={0x0, 0x0, 0xb, 0x2, 0xa, 0x80, 0xfffffffffffffff0}], &(0x7f0000000180)='syzkaller\x00', 0x1a6, 0x10, &(0x7f00000001c0)=""/16, 0x41000, 0x2, [], r2, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xd, 0x8, 0x405}, 0x10}, 0x78) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, r3) r4 = pkey_alloc(0x0, 0x2) pkey_free(r4) r5 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, r5) pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, r4) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x6, 0x2, 0x62, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x8000, 0x3, 0x8}}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x2}, 0x23) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:17 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x5, 0x5, 0x28, @remote, @dev={0xfe, 0x80, [], 0x1e}, 0x8000, 0x8000, 0xeb4b, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x80, 0xf077, 0x80, @private1, @private1, 0x80, 0x8, 0x3, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x8, 0x3, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, 0x8000, 0x7800, 0x3ff}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x8004) syz_emit_vhci(0x0, 0x19) 03:00:17 executing program 5: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000001180)={'dummy0\x00', @ifru_names}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c7b641289159ca1c8a05cf555f57f5ac", 0x0, 0x0, {0x5, 0x1}, {0x1, 0x79}, 0x2ba3, [0x81, 0x3, 0x101, 0x39cc, 0x10001, 0x6, 0x2, 0x6d, 0x9f8d, 0x0, 0x4, 0x0, 0x4, 0x9, 0x7fff, 0x7f]}) connect$llc(0xffffffffffffffff, &(0x7f0000001140)={0x1a, 0x0, 0x53, 0x4, 0x5, 0xff, @random="10b3c97a8804"}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000140)={{}, r1, 0xa, @unused=[0xfff, 0x2a, 0x5, 0xfff], @devid}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) 03:00:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f00000005c0)=""/32, &(0x7f0000000600)=0x20) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"7cfa542e73765cf06367902c85101e97", 0x0, 0x0, {0x6, 0x8000}, {0x1f, 0x4}, 0xcba, [0x0, 0x100000001, 0x76b6, 0x5, 0x5, 0xd42, 0xe4b, 0x6, 0xb25, 0x7, 0x4fad, 0x4, 0xdc36, 0x0, 0x2, 0x5]}) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xe47) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) kexec_load(0x3, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000040)="5b4b76846d5e526f0faaf6d8cf0c2a924cf1b06a5487f37e97245040f009b8f7d712c104", 0x24, 0x100, 0x1}, {&(0x7f0000000080)="af840469b7265a25153e9d25caa14b7f8d97c65c172b47baa7b16fa7dc69437c5998", 0x22, 0x101, 0x6}, {&(0x7f00000000c0)="5f4e782934c433273f6543cb222f78440e7bce8d2ab0d2cc2ba0d676b46106e4268b8e34199ad99f53840e59b5836ac03499310376139eb7df2928ca40d4c5d361b5cf232eb02dcce7ae4455541fc38feca3aeabb6eaffda18b328dec34640f61b8e5b08d131d4b4b2aea6e812300e692ad39ed2fb5b46f24b00640339bec95c27e7f970b8544ad76cee4a67e4d6aea14f6af0e40e848f33a368ef140579d29fc4f6b45c579836f6a70a1661e1eca3c885c8e5c818c356db3a017f6f0d041665d958b5bf45f2", 0xc6, 0x2, 0xb29}], 0x2a0000) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x20010, r0, 0x1) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc0480, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"2a16686a3266d051493a583de61af24c", 0x0, 0x0, {0x401, 0xff3}, {0x8, 0x962}, 0xe058, [0x8d5, 0x8000000000000000, 0x3, 0xffffffffffffff00, 0x8, 0x8, 0x40, 0xffff, 0x3, 0x9, 0x101, 0x9, 0x7, 0x1ff, 0xffff, 0x57ad359]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001140)={{r2}, r3, 0x0, @inherit={0x50, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000100000000000000810000000000000037a40000000000002500000000000000000000800000000063d5000000000000e84f00000000000009000000000000000100000000000000f539f7261bd60b45a545b7e4fe348cbcefa463aa6752e2aab873aaea90a5f8b9590c8bd8"]}, @devid=r4}) 03:00:17 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xffffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x1000) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x41185348, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x4) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x3000000, 0xffffffffffffffff) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) prctl$PR_SVE_GET_VL(0x33, 0x12dfb) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x0) 03:00:17 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0x1f, 0x0, @local, @empty, 0x7, 0x80, 0x100, 0x8}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="146896bc", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x1124919a0f848954}, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="8686d8ece067ebd8cf", 0x9) syz_emit_vhci(0x0, 0xffffffffffffff6b) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000480)=0x80) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000004c0)=""/212, &(0x7f00000005c0)=0xd4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x208000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xb, &(0x7f0000000a80)=@raw=[@alu={0x4, 0x1, 0x0, 0x1, 0x3, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map={0x18, 0xd2de5ead9ea97bf6, 0x1, 0x0, r0}, @ldst={0x3, 0x1, 0x3, 0xa, 0x3, 0x80, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x3, 0xa, 0x2, 0x4}, @map={0x18, 0x1, 0x1, 0x0, r3}, @ldst={0x3, 0x1, 0x3, 0x2, 0x1, 0x0, 0xfffffffffffffff0}, @map={0x18, 0x5, 0x1, 0x0, r4}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000200)=""/209, 0x40f00, 0x14, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x4, 0x2, 0x8}, 0x10, 0x0, r5}, 0x78) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x404c80, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'bond_slave_0\x00'}) r1 = socket(0x0, 0x800, 0xfffff001) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8051}, 0x4040804) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x22200) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0xc7, 0x81, 0x8, 0x37, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x7800, 0x1, 0x81}}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r0}, 0x10) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x6, 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004091}, 0x8051) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000003c0)={0x0, 0x245, 0x1, &(0x7f0000000380)=0x5}) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x3f, 0xc2, 0x3f, 0xf5, 0x0, 0x8, 0x68214, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0x5}, 0x9207, 0x2, 0x800, 0x9, 0x411, 0x1, 0x20}, r0, 0x1, r0, 0x8) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r1, 0x1fb) 03:00:17 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)='net_prio.ifpriomap\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) write$cgroup_devices(r0, &(0x7f0000000140)={'c', ' *:* ', 'r\x00'}, 0x8) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0x3) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001140)={{}, r4, 0x8, @unused=[0x9, 0x9, 0x3, 0x80000000], @subvolid=0x7}) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x12, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4004883) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(0x0, 0x19) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000424}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040000) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x64d7ed74, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x13, 0xffffffffffffffff, 0x6) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@exit, @generic={0x4, 0x7, 0x2, 0x5, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x1000, 0xe, &(0x7f0000000140)=""/14, 0x40f00, 0xa, [], 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0xa05, 0xffffffce}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pkey_alloc(0x0, 0x3) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r1, 0x0) 03:00:17 executing program 3: syz_emit_vhci(0x0, 0xd2af3ec0d50c2fe2) 03:00:17 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, r0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x30, r0, 0x4) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) munlockall() 03:00:17 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000e40)={'ip6_vti0\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', 0x0, 0x0, 0x2, 0x9, 0x5, 0x60, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x1, 0x7, 0x2, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002380)={'syztnl0\x00', &(0x7f0000002300)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x8, 0x1, 0x8, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7800, 0x7, 0x2410fa68, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002840)={&(0x7f00000023c0)={0x470, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xdac}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x39}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8, 0x7, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x44) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x800005, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x4, 0x5, 0x4, 0xff, 0x6, @remote, @private2, 0x40, 0x700, 0x0, 0x8}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r5, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r1, 0x2f, 0x4, 0x1, 0x8, 0x8, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x20, 0x1, 0x2, 0x8001}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r1, 0x56, 0xbd, 0x4, 0x5, 0x32, @local, @remote, 0x7, 0x7800, 0x80000000, 0xd8}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000680)={0x560, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x400, 0x8, 0x5, 0xffff}, {0x2, 0x80, 0x7, 0x5}, {0x77, 0x4, 0x40, 0x1}, {0x8, 0x0, 0xff, 0x7}, {0x4, 0x1f, 0x47, 0xec6}, {0x3, 0x0, 0x3, 0x80000000}, {0x6, 0x35, 0x80, 0x3}, {0x6, 0xc0, 0x0, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x8, 0x3, 0x7f, 0x40}, {0x3ff, 0x8, 0x7f}, {0x77, 0x3, 0x9, 0x10000}, {0x3, 0x5, 0x0, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x88bbea2ac1816535}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x3ffffff, r0, 0x400) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x2400c081) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000100)) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 3: syz_emit_vhci(0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x2, 0x80, 0x800, 0x401, 0x7, 0x7, 0x192d, 0x5, 0x6, 0x6d400504, 0x1}) 03:00:17 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:17 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@phonet, &(0x7f0000000600)=0x80, 0x95efee057f941660) bind$unix(r0, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) accept4$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x800) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$tun(0xffffffffffffff9c, 0xffffffffffffffff, 0x400101, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket(0x2c, 0x6, 0x1f) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) connect$caif(r2, &(0x7f0000000480), 0x18) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x800, 0x230000) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x4dd, 0x7, 0x7ff, 0x8000, 0xd2, 0x9, 0x9, 0x8125, 0x1, 0xffff, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:17 executing program 3: syz_emit_vhci(0x0, 0xe84d9ab18ffcdba3) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x4}}}}, 0xf) 03:00:17 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x10010, 0xffffffffffffffff, 0x7) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080)) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 03:00:18 executing program 3: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) syz_emit_vhci(0x0, 0x19) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) [ 1629.521245] Bluetooth: hci4 ACL packet for unknown connection handle 0 03:00:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x65, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x50, 0x4}, {0xfffc, 0x1f}}}}, 0x11) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff) 03:00:18 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) 03:00:18 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_info_req={{0xa, 0x6, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0xc0, 0x4}, {0x7, 0x9}}, @l2cap_conf_req={{0x4, 0x1, 0x2f}, {0x8000, 0x4, [@l2cap_conf_rfc={0x4, 0x9, {0x0, 0x9, 0x8, 0x4965, 0x1, 0x2}}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x2, 0x40, 0x1, 0xfff, 0x5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0x8, 0x7, 0x45, 0x4}}]}}]}}, 0x4a) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00') pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1000002, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"09e26b0d3f27be3df24d7ca21df20c5d", 0x0, 0x0, {0x7fff, 0x9}, {0x200, 0x7}, 0x2, [0xbfb, 0x8, 0x35, 0x3, 0x1f, 0x800, 0x5, 0x8, 0x2a, 0x7, 0x7fc0000000, 0x168, 0x40, 0x81, 0x1f, 0x8c]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000180)={0x2, 0x0, @start={0x0, 0x1, "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", "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"}, [0x1, 0x10001, 0x7, 0x0, 0x7b2, 0x9, 0x81, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x2, 0x7, 0x9, 0x8001, 0x3, 0x7, 0x4, 0x7d, 0x8, 0x1, 0xfff, 0xffffffffffffffff, 0x7, 0x5, 0x0, 0x800, 0x0, 0x4, 0x2266, 0x1ca4, 0x40, 0x8, 0x100000000, 0x8000, 0xfffffffffffffffc, 0x8, 0x1, 0x400, 0x10000, 0x0, 0x1, 0x0, 0x100000000, 0x7, 0x3, 0xffffffffffffffe1, 0x5, 0x0, 0x7, 0x9, 0x3, 0x6, 0x6, 0x2, 0xd32, 0x1f, 0x0, 0x80000000, 0x400, 0xfe7, 0x3, 0xf5, 0x8]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000bc0)={{}, r1, 0xe, @inherit={0x50, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x8, {0x0, 0x0, 0x8001, 0x4, 0x5}, [0x9]}}, @devid=r2}) [ 1629.652884] Bluetooth: hci5 ACL packet for unknown connection handle 101 [ 1629.685286] Bluetooth: hci5 ACL packet for unknown connection handle 101 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x4, 0x40, 0x20, 0x0, 0x5, 0x89081, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0xff5e, 0x2, 0x1, 0x7fff, 0xfffffff7, 0x1}, r1, 0x9, r0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_freezer_state(r0, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) getegid() 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffe28) 03:00:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"416dbdf85410efa9059120485c5d0413", 0x0, 0x0, {0x7, 0x8000}, {0x8, 0x42}, 0x1, [0x0, 0x80, 0xbc6, 0x7a, 0x1, 0x30000, 0x8001, 0x1000, 0x5, 0x0, 0x1, 0x3, 0x0, 0x7e93, 0x5, 0x6]}) 03:00:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff0c) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x749ac2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)={0x0, 0x101, 0xfffffffffffffca8, &(0x7f0000000140)=0x8}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"64cada46572ed33dc893cae8bcffe020", 0x0, 0x0, {0x7, 0xfff}, {0x7b, 0x6c}, 0xbf26, [0x9, 0x6, 0x10001, 0x9, 0x430, 0x0, 0x400, 0x5, 0x3f, 0x63, 0x8000, 0x0, 0x8000, 0xffffffffffffff81, 0x3e9, 0x5]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x7fff) 03:00:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0x3, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4805}, 0x4000) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:18 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x20000000000000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000810) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2080018, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2298b6aed818d2e58d4cf4a531fc31ca70a65e707cbc90eb9a800f826189cc70a14a223794cf7f0ede54b0ce810b3583a16a0742e3c7ec95e48c9450c39c7b0ad2c346f896029713686f7ac082ba4bbda25f51e02d00f3405091bed3a6f1893f101dfdcf3e52267d1bdc6096fbb0ebbe5d1cbac52eae7223e3522a292f77d517c50a7722c51fad5b9b0fad934fea1cb5dde6f625559609b41be7fe24f9a542d0290651bd9d915f5e35cf79d383a7a8e39b8509d310ddbaa71f41e8c4bf99c1279f23ad51df1f355e6e1969b75a010e2b90b7dd6ef594cc", @ANYRESHEX=r0, @ANYBLOB=',debug=0x0000000000000040,debug=0x0000000000000006,cache=loose,uname=,access=client,rootcontext=user_u,\x00']) 03:00:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x280) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) setfsuid(0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 03:00:18 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x7}, 0xc) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x400080) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) socketpair(0x1d, 0x6, 0xce, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x2000) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000004, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x2, 0x0, 0x200, 0x1140, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x6, 0x1f, 0x5, 0x8, 0x7, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0x100000) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000000c0)={{r2}, r3, 0x14, @unused=[0x0, 0x3, 0x7, 0xd219], @subvolid=0xffffffff}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0xf5b38374d9124834) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000d, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r0 = pkey_alloc(0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000040)="ce35e29851441121bcd6947adfc8a80d62007d319bc5f5f52c20f5dabcdb71f3842ebbb02e062f4841f773e1cc770b5fcb4f60bd60b5db467997577a06f5adb90140baf6fcdbeac9276a5c28fa35f08d6abd4b3f8e5d1b5b2b8efa0c09358482ada84291db8af25cf92723eb6eb9bf59054a0e928df86bd489db9733d22a5dc0d2e22863bb8e5e734604075b9a999a1ce291", &(0x7f0000000100)=""/157, &(0x7f00000001c0)="5cf83f13647ff8772c36d8c644290bea3ecc401713c5af14918398379776b7ce4c998c7944542c98edc6a3c2f39ced62ecc0dabc8a822c7e11880e1d9643786daf315559db09344251b35558c8444b386cfe451a6543d884d88365853842cc64da6a8befc267043934fee7f91fa1bbdbef99c23cfc8eb8f426f895cb507804c4f5d62df9a834422c0dbe3e5b29e1ffa4bd6c0e7c21791c206e73583c6a4268a0e6e687024a28df523e093310345db83a747e1a1c1f0b5ff93db9c91ecb6742b15ed2d0a02e6cd43cb143addf85e43f53c10a11f9c005927f53bd7d91ff66a279", &(0x7f00000002c0)="551350eb6eff6bdfd99bfbb2e318e428df9426073ac86ce7f48081edae3dbcfda1db18371341cb239c537f4182fddfd13be3d580786f98fa9cb0b90176cf74cb50947bd781afda3598dd91a6aa2a63ddf305851e3d839c83948689890e13c0e430cec5f589418c3c635f947be6", 0x6, r2, 0x4}, 0x38) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x10010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101800, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r3, 0x7fff, 0xdc, 0x9, 0xc8, 0x0, 0x4, 0x2, 0x4, 0x85, 0x90c, 0x5}) 03:00:18 executing program 5: recvfrom$llc(0xffffffffffffffff, &(0x7f0000000000)=""/241, 0xf1, 0x0, &(0x7f0000000100)={0x1a, 0x206, 0x7, 0xf8, 0x9, 0xfb}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) socketpair(0x1e, 0xa, 0x40, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r0, 0x0, &(0x7f00000001c0), 0x80800) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r1) 03:00:18 executing program 1: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x30, 0x80000001, 0x9, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x31}, 0x7800, 0x7, 0x96, 0x3c}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, 0x0, 0x10, 0x6, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x20000011) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x2) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000080)={0x0, 0x6, 0x87, 0x81, 0x8, 0xffffffff, 0x0, 0xa, 0xffffffff, 0x1, 0x0, 0x1}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000680)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_vhci(0x0, 0x19) 03:00:18 executing program 2: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x1, 0x8a3, @start={0x0, 0x1, "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", "1d94fd8574b66fdb19246fc8d52daeacfe325a847c151288954ac91ca50c7889da5ee62fb4c85f23b7fd7e41e6579891af5bd2e07f0f166d2a71b07a46dbd7ecc282b990b342d396ec74a2bc53d11f1a1e242f277d9f64f8478fab512ffc9e07c62dae897c337ca32c4eff698c826252b80bde7beacbf7aa50f0f56b902badb0aabe7bc50c60ba53686f99af19a98b64fdefa95b538ae5ab266db6d00a7a6105965f768fd1545eaa0669c5957fb92419d62a8ba9ff59c3ccd5e20d7849aef14044e233ebca5fe201c5f1553ca72baa96a813c178800f84519ab6e4fa771111cb852a808ed0071476a31eceef53548370a21dc1935eab5d280aaae38f6ea88cf558ca9305af25f92465115a1837c53342748c7373df9a7e298e1d916d4c04b582442d9a929f5f6ec8d5779940ebafa122940e0101d61dad47f5857d13284956f78203dd8db5448537c2df3606488f05a1b8e7d65847b4c5a1e69fdb3532bcd5cb4bafc7bd06bb867888bb6699586b6ee546011c9fc1aa0c2e7e05173afe0ab9434f5164f684536369f7cd687a3a1379aabc83b1b3e41b46a0a5cf4283e1dba4b19a1c90af8f6c3cb82ba4122db65b82f934d4b42bfeb5a1b32850f97f27af78518631b19fae4c5750cfcecc3c7e4ee0847f8fff20523443aa686d2df3e25a97d97c8ff2f794f03e24f9d4b7234dac1caf7fec2116739ebfb588459ea0eefff3f00514a9028e786811c08d83bd7c820f6d530423193b41888ea9bd9a2109f3101ab73db561404acc3fb18977e0a730ac7cdc7ebe72c01fd8a23332bdf97380608dc166694a37e8f1e0956b1d393e8834d227f826dbc44f3b1e5c475e46d715d52235b56c4b0fb790dfc55667b163e069d4fda63344d318441bc251d80ca6d0f549432c31d06820cec32cfc46fd92979c689f2132e4069ac18edba748ae5612ff3b2c761365f5b7b23315488c955400f6c2d6c9430e4ef3658447d7f6412a55634927e25e305e7a58ce0227b986018a01305d65ad9b6aa6f6a741c43a5c682bfe8b42fb540c800c87ab19021d479c6dbf95c926ea4682799c6491b0a4c29eaeb1b20ef57cf26ad248c61f4dda1e591318ca1b90bda85c51453df4ce06cc6b6ec3535086f0ee781d434e80fff9424db48ab82e78b63671c59c67f69583eef2b9fc32a75c0c8e7ad5967bc00122114df7f102aa83fac8f69510fc8a78fb8be2cb7e8c9dbbfdd501bd73a130b760950c0a584aafa8294ce58de11ffc57c3b3b61862ad019839d2a341e119935c92c4bc47f38957452e07ee1567c349a9106e47e88f1f6c7cafe7288bd1836e12ae903e5bb3b72203ce5b19bb5899d2f17dbe512acc42719d8749c9d56ced40ae714ead983aa94a44821fda6aa9d6d31961b890bbce5182c15b32efce10ee75a93f7470e1d5bb0ef4af3928c7ac2d7a5b86fe23411f59b1"}, [0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x2, 0x1, 0x6, 0x14bf, 0x3b, 0x6ae, 0x800, 0x7fffffff, 0x3f, 0x8, 0xb805, 0xa7, 0x2, 0x8001, 0xd95, 0x1, 0x81, 0x3, 0xa740, 0x9, 0x7, 0x7, 0x1ff, 0x5, 0x8001, 0xef, 0x1, 0x5, 0x2, 0x4, 0x400, 0x84, 0x401, 0x35, 0x2, 0x8, 0x401, 0x437, 0x1, 0x2, 0x8, 0x2, 0xffffffff, 0x100, 0x1, 0x40, 0x6, 0x7, 0x3, 0xb18, 0x9, 0xab17, 0x1, 0x1, 0x2f5d, 0x2, 0x2, 0x8001, 0x3, 0x131]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000a80)={0x2, 0x1, {0x7f, @struct={0x2, 0xe1}, 0x0, 0x3, 0x5440, 0x2, 0xea30, 0x6, 0x1a, @struct={0x5, 0xfffffedb}, 0x5, 0x81, [0x8, 0x8001, 0x7ff, 0x80, 0x9, 0x400000000000]}, {0xe98, @struct={0x7, 0x80000000}, 0x0, 0x1000, 0x10001, 0x7f, 0x4, 0x80000001, 0x4, @usage=0xc08, 0x0, 0x81, [0x6, 0xc1d, 0x8, 0xff, 0x8, 0x5310]}, {0x4, @struct={0x2, 0xdf}, 0x0, 0x7ff, 0x4, 0x9, 0x5, 0x7, 0xc0, @struct={0x3, 0x1}, 0x4, 0x6, [0x5, 0xf54c, 0xffffffffffff0000, 0x8, 0x3, 0x6]}, {0x8, 0x5, 0xffffffffffffff81}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001140)={0x1, 0x4, {0xffffffffffff8001, @usage=0x9, 0x0, 0x0, 0x1ff, 0x50000000000000, 0x1, 0x6, 0x1, @struct={0x0, 0x5}, 0x20, 0x8, [0x100000001, 0x0, 0x1e85, 0x0, 0x3]}, {0x9, @usage=0xe4, r0, 0x0, 0x18000, 0x8, 0x9, 0x9aa8, 0x2, @struct={0x100, 0x6}, 0x4, 0x9, [0x280000, 0x5, 0x401, 0x7fff, 0x1, 0x8001]}, {0x9, @struct={0x10000, 0x5}, r1, 0x7b1, 0x4, 0xc480, 0x2, 0x1, 0x0, @struct={0x1, 0x5026}, 0x800, 0x8, [0x4, 0x1, 0x5, 0x5, 0x0, 0x1]}, {0xffffffffffffffff, 0x0, 0xac0}}) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) syz_genetlink_get_family_id$team(&(0x7f0000000e80)='team\x00') pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff74) 03:00:18 executing program 5: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000880)=0x10, 0x80800) getpeername$llc(r0, &(0x7f00000008c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000900)=0x10) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250700000014000200fc01000000000000000000000000000114000300fe8000000000000000000000000000382600070073797374656d5f753a6f626a6563745f723a6d61696c5f73706f6f6c5f743a733000000008000500e0000002050001000000000008000500e0000001"], 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:restorecond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x880) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="08800000", @ANYRES16=r1, @ANYBLOB="000402000000fedbdf250800000014000200ff020000000000000000000000000001140006006e65747063693000000000000000000014000200fc020000000000000000000000000000050001000100000014000300fe8800000000e4c525000200000007010800050064010101140006006e657470636930000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x15}, 0x4000004) 03:00:18 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x16a001) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00'}) pkey_alloc(0x0, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x7fffffff) 03:00:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd1}, "b1fdb6587ff87bec446a32e4c0da334c94f14430b25868da7a5b975e5c13e69ecbd49da9b22ef94671a950ebdfcb5ffda93d88effb5154aeca84faa2d0126b4d630f6921d74b4c7b6cc36b1b09ed447ee159b6365dce370b500d4c8bd07a6ebafb1876c7613f1e8941ca1941ddb4cb38811cb79d7ac3903f1c2ff3e8cfea62b36447a9bbbb2a6775a78456179dd88a82a8cb01ade6847e3fdaf5ba036b403097e4e11cc3eeae1de8951751eb2790a51e1d919e54ff1e0fc6e283f8aecfb62824fcce8ee0f5089ba33c7a71cee56b07e92e"}, 0xd5) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40001, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000000000000) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x7) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xd, r0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x3a}, @l2cap_cid_signaling={{0xfffffffffffffe60}, [@l2cap_conf_rsp={{0x5, 0x8, 0x6}, {0x3000, 0x8, 0x1}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x800, 0x401}}, @l2cap_conf_rsp={{0x5, 0x80, 0x20}, {0x1, 0xf6a6, 0x617, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x5, 0x1f, 0x1, 0x5, 0x101}}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0x2d79}, @l2cap_conf_ews={0x7, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x3f) 03:00:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0x1, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) 03:00:18 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x19, 0x4, {0x1, @usage=0x9, r1, 0x4, 0x4, 0x9f, 0x1, 0xfb, 0x400, @usage=0x7, 0x40, 0x1, [0x0, 0xffffffffffffffff, 0x7fffffff, 0x3, 0x8]}, {0x1, @usage=0x5, 0x0, 0x9, 0x20f, 0x1, 0x7fffffff, 0x9, 0x8, @usage=0xffffffff, 0x5, 0x6, [0xfffffffffffffffc, 0xd5, 0x8, 0x1, 0x1]}, {0x2800, @usage=0x5, 0x0, 0x6, 0x6, 0x706a, 0x5, 0x8, 0x1c, @usage=0x1, 0x6, 0x3, [0x0, 0x0, 0x3, 0x3, 0x974, 0x2]}, {0x5c1d, 0x2997, 0x4}}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0xab, 0x2, 0xf7, 0xff, 0x0, 0xfd, 0x50, 0xb, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x100, 0x2, 0x9, 0x4, 0x81, 0x1, 0x7000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, r0, 0x3) 03:00:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2a8640) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0xc, 0x2, {0x3, @usage=0xffff, 0x0, 0xffffffff, 0x7, 0x6, 0x0, 0x3, 0x49a, @usage=0x100000001, 0x20, 0x6, [0x8, 0xe14, 0x9, 0x2, 0x9, 0x91]}, {0xffffffffffffffe1, @struct={0x1000, 0x1}, 0x0, 0x9, 0x7, 0x4, 0x4, 0x5, 0x8, @usage=0x3, 0x3f, 0x1, [0x10000, 0x5229, 0x8, 0xffffffffffff8001, 0x0, 0x7fff]}, {0x200, @struct={0x281, 0x9}, 0x0, 0xffffffff80000000, 0x36ed, 0xffff, 0x2a, 0x91ff, 0x35, @struct={0xf25f000, 0xffffff00}, 0x80000001, 0xe0c9, [0x6, 0x3f, 0x1, 0x9, 0x8, 0x100]}, {0x1ed, 0xa2, 0xfff}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000480)={0x2, 0x7, {0x7, @usage=0x9, r2, 0x5, 0xbb0, 0x2, 0x0, 0x4, 0x1, @struct={0xbc, 0x4}, 0x401, 0x3, [0x1, 0x7fffffff, 0x5, 0x7ff, 0x7, 0x7]}, {0x1, @usage=0x5, 0x0, 0x1, 0x8000, 0x2, 0x0, 0x4, 0x4a8, @usage=0xffffffffffff7e65, 0x1ff, 0x5, [0x76be, 0x7f, 0x4a4, 0x40, 0xfffffffffffeffff, 0x3]}, {0x7df, @usage=0xd4a7, 0x0, 0x0, 0xfffffffffffff759, 0x9, 0x6, 0x9, 0x406, @struct={0x80, 0x1}, 0xa014, 0x6825, [0xffffffffffffff1f, 0x1, 0x1, 0x0, 0x0, 0x1000]}, {0x4, 0x9, 0x7}}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x1) pkey_free(r3) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) 03:00:18 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x70}}, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:18 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250300000014000300fe8080000000000000000000000000b108000400e000000208000400e000000114000200ff0100000000000000000000000000011400030020010000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x20008800}, 0x8001) syz_emit_vhci(0x0, 0x19) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 03:00:18 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) 03:00:18 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"c11120e996b210bf3f632c5d2b6e9db3", 0x0, 0x0, {0x20, 0x3}, {0x10001, 0xa00000}, 0x7, [0x1000, 0x4, 0x626cd369, 0x2, 0x7fffffff, 0x10000, 0x9, 0x3, 0x0, 0x8, 0xd62a, 0x80000000, 0x6a0, 0x800, 0x100, 0x3]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)=r1) gettid() 03:00:18 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x1, 0x92, @status={[0x6, 0x9d1, 0x7e, 0xff, 0x9, 0x7fff]}, [0x7, 0x6777, 0x8, 0xfffffffffffffff9, 0x8, 0x7ff, 0x40, 0x815, 0xfffffffffffffff7, 0x3f, 0x8, 0x7, 0x2, 0x800, 0x7, 0x4, 0x5, 0xe, 0x10001, 0x1, 0x4000000000, 0x8, 0x3, 0x5, 0x1fc9, 0xb4, 0x0, 0x401, 0x8000, 0x9a, 0x80, 0x6, 0x10000, 0x9, 0x7, 0x1, 0xfffffffffffffffe, 0x61f, 0x1dfe, 0x27, 0xffffffff, 0x1, 0x9, 0x100000000, 0x2, 0x100000001, 0x4a, 0x96, 0x200, 0xd3, 0x18000, 0x4, 0x7, 0x2a23, 0x2, 0xffffffff, 0xfff, 0x5, 0x8, 0x2d25, 0x100000, 0x5, 0x6, 0x7fff]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:18 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x103280, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x50, r0, 0x40000000000000b) 03:00:18 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) 03:00:19 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x3) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) socketpair(0x23, 0x2, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1], 0x5f8) 03:00:19 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) getpid() pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r1, &(0x7f0000000000)=@util={0x25, "b2a4b6b482f803e12ea2ed90f1d60f44"}, 0x18) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10010, r0, 0x0) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3fb, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x200a800, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '-/!\\$:#.:^'}}, {@euid_gt={'euid>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '+-/'}}, {@euid_gt={'euid>'}}, {@euid_gt={'euid>', r2}}, {@obj_role={'obj_role', 0x3d, '^*@%&#.+'}}]}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"f406d8656c01a227b0d06a9eab95d39c", 0x0, 0x0, {0x10001, 0x6}, {0x0, 0x101}, 0x7, [0x0, 0x3, 0x80000001, 0xe7, 0x1, 0x1, 0x3d26, 0xb764, 0x71d, 0x200, 0x8, 0x3, 0x9, 0x9, 0x61d, 0x80000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"9f2fe72db34aea34de1c122c6e0da5f4", 0x0, r3, {0x6, 0x800}, {0x6, 0x2}, 0x5, [0x400, 0x8, 0x3, 0x4, 0x7, 0x33bc, 0x2, 0x0, 0x8, 0x86, 0x3ff, 0xffff, 0x3e7ab34d, 0x1, 0x1, 0x1]}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000500)=0x1) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) socket$caif_stream(0x25, 0x1, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x64c2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) 03:00:19 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x0, @mcast2, @loopback, 0x1, 0x7800, 0x2000ffff, 0xffffffff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x13, 0x1, 0x6507, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x4010, 0xffffffffffffffff, 0x9) 03:00:19 executing program 2: pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000e, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) 03:00:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4081) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000045}, 0x40000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0xc40a4e0c9d4e910d, 0x70, 0x8, 0x3, 0x9, 0x8, 0x0, 0x7fff, 0x10000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2000, 0x7, 0x0, 0x5, 0x1f, 0xfffffffc, 0x5}, 0xffffffffffffffff, 0xf, r0, 0x8) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = gettid() r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) getpeername$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) 03:00:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x1, 0x92, @status={[0x6, 0x9d1, 0x7e, 0xff, 0x9, 0x7fff]}, [0x7, 0x6777, 0x8, 0xfffffffffffffff9, 0x8, 0x7ff, 0x40, 0x815, 0xfffffffffffffff7, 0x3f, 0x8, 0x7, 0x2, 0x800, 0x7, 0x4, 0x5, 0xe, 0x10001, 0x1, 0x4000000000, 0x8, 0x3, 0x5, 0x1fc9, 0xb4, 0x0, 0x401, 0x8000, 0x9a, 0x80, 0x6, 0x10000, 0x9, 0x7, 0x1, 0xfffffffffffffffe, 0x61f, 0x1dfe, 0x27, 0xffffffff, 0x1, 0x9, 0x100000000, 0x2, 0x100000001, 0x4a, 0x96, 0x200, 0xd3, 0x18000, 0x4, 0x7, 0x2a23, 0x2, 0xffffffff, 0xfff, 0x5, 0x8, 0x2d25, 0x100000, 0x5, 0x6, 0x7fff]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x6}, 0x10) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, r1) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) socket$inet6(0xa, 0x4, 0x0) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5000009, 0x2010, r0, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) socketpair(0x3, 0x800, 0x400, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) 03:00:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x1, 0x92, @status={[0x6, 0x9d1, 0x7e, 0xff, 0x9, 0x7fff]}, [0x7, 0x6777, 0x8, 0xfffffffffffffff9, 0x8, 0x7ff, 0x40, 0x815, 0xfffffffffffffff7, 0x3f, 0x8, 0x7, 0x2, 0x800, 0x7, 0x4, 0x5, 0xe, 0x10001, 0x1, 0x4000000000, 0x8, 0x3, 0x5, 0x1fc9, 0xb4, 0x0, 0x401, 0x8000, 0x9a, 0x80, 0x6, 0x10000, 0x9, 0x7, 0x1, 0xfffffffffffffffe, 0x61f, 0x1dfe, 0x27, 0xffffffff, 0x1, 0x9, 0x100000000, 0x2, 0x100000001, 0x4a, 0x96, 0x200, 0xd3, 0x18000, 0x4, 0x7, 0x2a23, 0x2, 0xffffffff, 0xfff, 0x5, 0x8, 0x2d25, 0x100000, 0x5, 0x6, 0x7fff]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xea6095c778bdf1be}, 0x24008000) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 03:00:19 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth1_to_hsr\x00'}) 03:00:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000000)={0x1, 0x92, @status={[0x6, 0x9d1, 0x7e, 0xff, 0x9, 0x7fff]}, [0x7, 0x6777, 0x8, 0xfffffffffffffff9, 0x8, 0x7ff, 0x40, 0x815, 0xfffffffffffffff7, 0x3f, 0x8, 0x7, 0x2, 0x800, 0x7, 0x4, 0x5, 0xe, 0x10001, 0x1, 0x4000000000, 0x8, 0x3, 0x5, 0x1fc9, 0xb4, 0x0, 0x401, 0x8000, 0x9a, 0x80, 0x6, 0x10000, 0x9, 0x7, 0x1, 0xfffffffffffffffe, 0x61f, 0x1dfe, 0x27, 0xffffffff, 0x1, 0x9, 0x100000000, 0x2, 0x100000001, 0x4a, 0x96, 0x200, 0xd3, 0x18000, 0x4, 0x7, 0x2a23, 0x2, 0xffffffff, 0xfff, 0x5, 0x8, 0x2d25, 0x100000, 0x5, 0x6, 0x7fff]}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xa72c08367acab161}, @val={0x1, 0x82, 0x8000, 0x1000, 0x0, 0x1}, @x25={0x3, 0x1, 0x11, "379e3121f7a5443cf2edc4734fe458743cdaeb8a95fda694db695bc42e750c5f018a1ae6a904660077fd18894982ba741644496530f8807c04c6c84631023ba8d793bc2cdd1d7385bdd9c4ba5f4d249d31fb44db1f36969c17c427277639619ebf924277918460b8f0c5a90dcd128dce0e4884df6ff64c0aa6efef5fa528de58105d5c1f9ff116577bd48632ac168a74f63e9a11d33c32800b3830a56d01d74dd9ed1a869ef6a779d99a32fe7eec79f497e3671ab318b4c3610a27ae04a89324db4d0c"}}, 0xd4) 03:00:19 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x800, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f00000000c0)='1\x00', 0x2) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x810, r0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0xcc6e, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) 03:00:19 executing program 1: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000001c0)=0x80) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000f, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000001c0)=0xe8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0xa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20008000) syz_emit_vhci(0x0, 0x19) 03:00:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x910, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}}, 0x40090) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x20010, 0xffffffffffffffff, 0x6) 03:00:19 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 03:00:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400200, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x8) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000000, r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_free(0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80, 0x80000) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0xfffffffffffffcf0) 03:00:19 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000000)={{}, 0x0, 0x1a, @unused=[0x8, 0x7, 0x6, 0x4], @subvolid=0xfffffffffffffff9}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x3) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0xffffffffffffff68) 03:00:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0xc0feb05f) 03:00:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="fa0e2f6b62aae70304c29cf0cf23f1e7a6f5c429eaff37521f315952b2da5f5727e14a0776390240a73392541e70223591a71e537074172e3d", 0x39) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x2, 0x3, 0x4, 0x4, 0x40, 0x20, 0x7ff, 0x1, 0x2}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x1ff) 03:00:19 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:19 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x3f, 0xc8, 0x1}}}, 0x7) 03:00:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x51601) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) 03:00:20 executing program 3: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x420000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x41a182, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x1) 03:00:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_emit_vhci(0x0, 0x19) 03:00:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x40010, 0xffffffffffffffff, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1042, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@posixacl='posixacl'}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}], [{@subj_user={'subj_user'}}, {@seclabel='seclabel'}]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000000b00)={0x724, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1cc}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9a}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x188, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r0}}}]}}, {{0x8, 0x1, r0}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x6, 0x47, 0x68, 0x401}]}}}]}}]}, 0x724}, 0x1, 0x0, 0x0, 0x100080c0}, 0x40c4) 03:00:20 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:20 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) recvmsg$can_bcm(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000000480)=""/144, 0x90}], 0x6, &(0x7f00000005c0)=""/4096, 0x1000}, 0x4020) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = perf_event_open(&(0x7f00000004c0)={0x4, 0x70, 0x7, 0x1, 0x81, 0x3, 0x0, 0x983a, 0x2e35ebf83c45ebaf, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x9, 0x8d12}, 0x1000, 0x9, 0x3f, 0x2, 0x81, 0x80000001, 0x1f}, 0x0, 0x8, r1, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000009c0)={0xb, 0x5, {0x3, @usage=0xbe3f, r2, 0x1f, 0x1a, 0x9, 0x6, 0x7, 0x80, @usage=0x400, 0x401, 0x8, [0x800, 0x400, 0x400, 0x7, 0x4]}, {0x7, @usage=0x7, r2, 0x0, 0x9, 0x9, 0x5, 0x8a4, 0x80, @struct={0xfff, 0x3ff}, 0x145d, 0x400, [0x4, 0x401, 0x1, 0x5, 0x3, 0x9]}, {0x200000000, @struct={0x1, 0x27e9}, r5, 0x7, 0x0, 0x3, 0x1, 0x8, 0x400, @struct={0x0, 0x8}, 0x8, 0x5, [0xfffffffffffffffe, 0x36, 0x2, 0x4, 0x5, 0xd40]}, {0x1, 0x1, 0x1f}}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x6) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r6 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xe, r6) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xc9, 0x0, 0x3, 0x7, 0x0, 0x17f1400, 0x4000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x4}, 0xc802, 0x0, 0x9, 0x9, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x8, 0x1ff, 0x2, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x700, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x7, 0x1, 0x54, @private2, @private2, 0x40, 0x10, 0x0, 0x72d}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)={0x558, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2671}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xad}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x8, 0x4, 0xbb, 0x2}, {0xb0e, 0x9, 0x36, 0x5}, {0xfff, 0x2}, {0xffff, 0x3, 0x40, 0x400000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x558}, 0x1, 0x0, 0x0, 0x20000000}, 0x44122) syz_emit_vhci(0x0, 0x19) socket$inet6_udplite(0xa, 0x2, 0x88) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x301, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x5, 0x4) syz_emit_vhci(0x0, 0x19) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) connect$caif(r1, &(0x7f0000000080)=@dgm={0x25, 0x0, 0x1}, 0x18) 03:00:20 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x2a8741, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) recvmsg$can_bcm(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/142, 0x8e}, {&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000000480)=""/144, 0x90}], 0x6, &(0x7f00000005c0)=""/4096, 0x1000}, 0x4020) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8, 0x18}, 0xc) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 3: syz_emit_vhci(0x0, 0x11f) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={[], 0x10}, 0x81}}}, 0xd) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) 03:00:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200001b, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:20 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x180001, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 03:00:20 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x7f, 0xc9, @fixed={[], 0x10}, 0x1, 0xff}}}, 0xe) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x19}, {0x6, [{0x46139e84c2499798, 0x6}, {0xc8, 0x9}, {0xc9, 0x3}, {0xc8}, {0xc9, 0x7e0}, {0xc8, 0x4}]}}}, 0x1c) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='6\x00', 0x2) 03:00:20 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:20 executing program 3: syz_emit_vhci(0x0, 0xcd) 03:00:20 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:20 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000000)={0x3, 0x4, @status={[0x7ff, 0x1, 0x3b2, 0x7ff, 0x7, 0x5]}, [0x3885, 0x100000001, 0x6, 0xffffffff, 0x5, 0x3, 0x7, 0x7, 0x100000000, 0x100000001, 0x3, 0x1, 0x8, 0x9, 0x7, 0x4, 0x7, 0x6, 0xa2, 0x6, 0x9, 0x1, 0x0, 0x9, 0xffffffffffff0001, 0x0, 0x3b78f0450000, 0x4b, 0x1b4, 0x400, 0x3, 0x6b, 0x1000, 0x967dd8, 0x4, 0x8, 0x7, 0xffffffff, 0xff, 0x6, 0x0, 0x2, 0x6, 0x100, 0x6, 0x9, 0xa21, 0x6e7d, 0x3, 0x9, 0x7, 0x9, 0xd3, 0x200, 0x3, 0x5, 0x80, 0x300000000000000, 0x80, 0xd283, 0x60, 0x8, 0xffffffff, 0x7]}) 03:00:20 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffdbf9a, 0x20201) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xf15c92056f0c150a, 0xffffffffffffffff) 03:00:21 executing program 4: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:21 executing program 3: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200001b, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8, 0x18}, 0xc) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='syzkaller\x00', 0x200, 0x0, &(0x7f0000000080), 0x0, 0x9, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x2, 0xffffffff, 0x4}, 0x10, 0x0, r0}, 0x78) 03:00:21 executing program 5: socket$inet6(0xa, 0x1, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000402000000fddbdf2502000000080003000600000008000200050000005800018014000400fc00000000000000000000000000000014000400ff020000000000000000000000000001060005004e23000014000400fc020000000000000000000000000000050002003600000008000300e00000011c000180050002004000000008000700", @ANYRES32=r0, @ANYBLOB="060005004e2000000800030007000000080002000000000090f4225d2bae5137181e013b618a6d08015ca3ed95b95b4b2d806189998b349439bc5a133f2a1ca4d0c8d16bfc91f9f1d2d9ba6a8e8d8c696369ff30b78bac29233ea6daf99f26d04263eef3e0957856e76e95c97872fc065eea1c9a1483c90b460b04636292289860b8d549f0a376b31111154f34be6572882861ca16ee66a5b858a2a5f57e77"], 0xa8}}, 0x20040040) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, r0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) 03:00:21 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 3: syz_emit_vhci(0x0, 0x19) capset(&(0x7f0000000040)={0xf1504, 0xffffffffffffffff}, &(0x7f0000000080)={0x480000, 0x7, 0x5f, 0x101, 0x8, 0x400}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='pids.current\x00', 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000400), 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 03:00:21 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 2: socket$inet6(0xa, 0x1, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000402000000fddbdf2502000000080003000600000008000200050000005800018014000400fc00000000000000000000000000000014000400ff020000000000000000000000000001060005004e23000014000400fc020000000000000000000000000000050002003600000008000300e00000011c000180050002004000000008000700", @ANYRES32=r0, @ANYBLOB="060005004e2000000800030007000000080002000000000090f4225d2bae5137181e013b618a6d08015ca3ed95b95b4b2d806189998b349439bc5a133f2a1ca4d0c8d16bfc91f9f1d2d9ba6a8e8d8c696369ff30b78bac29233ea6daf99f26d04263eef3e0957856e76e95c97872fc065eea1c9a1483c90b460b04636292289860b8d549f0a376b31111154f34be6572882861ca16ee66a5b858a2a5f57e77"], 0xa8}}, 0x20040040) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x189200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25040000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000000) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x3) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2) syz_emit_vhci(0x0, 0xfffffffffffffe1e) 03:00:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x246081, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'geneve1\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x44e, 0x7f, 0x9, 0x6c, 0x2, @remote}, 0x10) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x6, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:21 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) 03:00:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 03:00:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001740)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x8, 0x1ff, 0x2, @mcast1, @private2={0xfc, 0x2, [], 0x1}, 0x8000, 0x700, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x7, 0x1, 0x54, @private2, @private2, 0x40, 0x10, 0x0, 0x72d}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)={0x558, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2671}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xad}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x8, 0x4, 0xbb, 0x2}, {0xb0e, 0x9, 0x36, 0x5}, {0xfff, 0x2}, {0xffff, 0x3, 0x40, 0x400000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x558}, 0x1, 0x0, 0x0, 0x20000000}, 0x44122) syz_emit_vhci(0x0, 0x19) socket$inet6_udplite(0xa, 0x2, 0x88) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:21 executing program 1: syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) rt_sigaction(0x19, &(0x7f0000000100)={&(0x7f0000000080)="3666660f383809c4e28ddf4b52c4a215458200000080c422e5dd6e0046d86da60f01d8c118d0c48191f57770c483c15edc382e3e410f01fa", 0xc0000002, &(0x7f00000000c0)="8f69f890232e0f380b8101f60000400f4b56657ce3f00fbabc4d1d030000ae400f8ae9000000f3400f53eec462a197e465660f3a62cd38c4c1fd295600", {[0x9]}}, &(0x7f00000001c0)={&(0x7f0000000140)="64f30f7e3da7000000c402b10377f1c461fc2b445f02c443c97c290d3e0f0f20bf0f0f36bf0f29ea0f01f9c4c13c159800000000f0440fc155e2", 0x0, &(0x7f0000000180)="c4a1d5e47cda00c4037917cdf8c481fe5be866440f380206c402e9a8f6c4a2793573bcc46129ecbbda00000066410f383a0ed884a0c8000000c4e1f96f1f"}, 0x8, &(0x7f0000000200)) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 5: ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x6) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x210000, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x1000000000000001) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x7b, 0x7, 0x9, 0x4, 0x0, 0xfffffffffffffff9, 0x40211, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6e6, 0x4, @perf_config_ext={0x10001, 0x200}, 0x0, 0x7ff, 0x9000, 0x9, 0x1, 0x10000, 0x621f}, r1, 0xa, 0xffffffffffffffff, 0x4) 03:00:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 03:00:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40840}, 0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x78dd3bc40a35beb6}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x29}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.low\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000480)={0x2, 0x80000000, @start={r2, 0x1, "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", "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"}, [0xffff, 0x2, 0x2000000000000000, 0xb1, 0x1, 0x0, 0x6, 0x2, 0x2, 0x2, 0x67, 0x1, 0x10001, 0x0, 0x10001, 0x0, 0x101, 0x80, 0x7f, 0x400, 0x1, 0x10000, 0x5, 0x8, 0x1, 0x67f, 0x8, 0x80000000, 0xa8c7, 0x3f, 0x1, 0x4, 0x1, 0x0, 0x9, 0x1000, 0xff, 0x10001, 0x3, 0xfffffffffffffffb, 0x0, 0x260, 0x200, 0x4154, 0x8000, 0xfffffffffffffbff, 0xffffffff80000001, 0x1000, 0xfffffffffffffff9, 0x100000001, 0x0, 0x1, 0x200, 0x3ab9945a, 0x400000000000, 0x81, 0xed87, 0xcc65, 0xfffffffffffffffe, 0x7fff, 0x0, 0x5, 0x634a]}) 03:00:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400200, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x8) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000000, r1) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_free(0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80, 0x80000) 03:00:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="cf37ed07c0abe9b292c3356bfe6f965fc554469e3fed323f4e9bf9dc0e70d19906c455ba500241979354155f2c864041e63f72fa864eb891efd79009148eb3328ae5db5ffa891cea0ab064415ebecdac3e3b679188460c5daa2d0e0720dba2c4f4bfeaa4f888e13ee2bff0ccc23e4a735c946b57d4cd5b01c4213028cab06ab28116fa02e00cbb80b77623046c0cc9541a572e7c2c0e85d5e684aa26e03b437be066ad17bc3a40bb6fa7ddce25e1a7458c5ebe9b9981e59f38932b232ef56a6e0f56be21e8fdcee114414537dbf147c159109a67bdb815edaaad4c645754e5e3327e438fced00c4e0c7bf2c0a092c86558c43cc6b30625c2f6f5018c28a98bc2ce3b63d7656f7a16ab73e59243bd9a1a715a1159b6d274b31b5473d7dab328d8e43e2f3d9b10297ab48a58ac5d61efaab4e7c45c9224e5fced8b4fd598fb59747babce42e1747a6f5ece482b09d69fc965e8698e7f225a77e43a69d042921776d58ef835687ef428a927d97399365db43352a356372b89b586bead212d2adbb49e6733561609238643a3f70e4cd177ce8a1fa3cdba3aa41291cbf116a8eed6240fc8a1d4dc8f19a5d1b390117a2ea760610f17ac99e31b5c31facb491eaf30cb7137fe2be1aabaa9637575e0d104c7200b9098c9d68c4e3dfd40f09f0966a81fc0c458bd8738cff758104f2e935499ec2ddceed7d91a1b6f87ae05d62e7597b699eec1c095e76341345787aa5aaf6c0185266d25814b71f72d6cfa53be299b85746b91bab33f5e86d00f2615ff47f1a7649aa91b1aff94630f27fac8df10f4dd554a4ba73a5910da5ddbae5d2c41977a1d973f35bf4695c1eadc40a33380646e0153ef293968d5ec3b19a6683fd8f1dccb1b2c37239bbe42c3a203e8e36bcf6378890df45978c21d0a9c1ed9a76d6cc1f31062baa4ce9b135ed4ac0b9c000302b3667e9d56d625aec3f50c4fd4769a145f765a291be8edc4d2e0bbb0ec1df39c1f4cb30f347a22fd1b21c68d8869228d60dd8ed2f83cab7ecb939d3f903bb74836069379d5910c05b420445cabd3bbc376ef4185cc0d0db67b0336306ad7cf7a53daf3aa1219d68a17657c2ab8d5bb231457895a427a869bd5607bb5a0c41d7c57434856224f2c853873a4d64406ebf4960fd34e73c82c09341d737d6ae42a2325a72a78eb274da0de01e79b5ba7754da29210ffad601c07cf5e68d606b70465b5816ea4a53a5d4034d06e8460ce9ad5c812aca5fcae1cf041aff1811b67b1d61bfa59c8484c1572cc1b4f6049d216834a3ce5a0193e75afa85a71b7d501e1e76dc253442f1f3efae2a6ffb6e23cca68ea1df4fec0b04e09e92cc54fe2eced70a357acc2a70f1197ecac5355e749d126eec3a3ea3abe2fa9bcc843f3b8631dc1f59434a5dc1bc3ee22c2a2e91008094268dad34db47aa39ed1a537ed4a82f7cb8b18c31e15e6b2df6a0b14b05f123731896a868c8e2e760784e2ae9bd9e9a12d5a12826b04fd24ea114a414cb967e5280df00d1ee2718c2ac52812ae3cec25abb9eecc5b8743c08519844c07d103d058ff147f03920797d54ee4d71510f25d0e3b6352a6e610a2505f5609c28672b9898c23a6efef17318aad2e232dadfb540e415acd60e45b34edff67c4f0c80d0e1670c51673c7dcaf249ac7e42e713eb06bce96e41ff92a18d28b56b79ef86c7bff7eacf8128bc4e029d62249333647aacbbbd9462e66959d89238f950428d4c8b88cd08fcf5e6651d43af09436c0b7ad4aaffcb7fc62fddb3946daa2eb61252511d1584fd973782e21c2cece3fe9130abda8e6772923d9286693def50b63e5975741e541df0703ab84bf25bc01cd52ae567e3c79bb07b12b91294a703604fc77020ae9e57ba8af7cef7eae89d18871b01c2ea06ae3b0ef76414a0a85be81f8b09c9afa74996894f93b894fb4b7dea17d2433f3be921c6992ae3acb0e90ebcb157266c5be95216dac77b1da0baa87a3ef10cdd479c93f1c9d69fe5104683398f0ea1d15a941281164680a73e42ed5f33034bd9a3d019b157c8e2681623fd6e68b53fddf96917f1531e730f32dbd56fcd13180ed519d4ce80514fa45a6aa02d01d73de687e43dc8286de381511b06cdaaae4b3e698d71b73d81eef8951dd09d73af887949cd13ad7ac8494b79277ec420c92d3259c7ef8b27210c8c285b17bb37cf4da9ce438da72e21193592dd7f851563aaeeea8e9ee189b9730127ba44b9f789d192127b47a365ae85a6c3e299a21bd6c963f8ec2966b9e9eb220989ada92b318f602ed1e5d548d48e781f8cf4079c33cb55e198a801a7363479e0014c915d3078eba7f4dc092701691e966e8798cf97084e930c3924558bdc1f227c5116dccfd01dbf35c3acc46639211ff41545944a9d9ea703084e9977dec577bb531a64c30483c9ed00932eacb72fd97733233f4c7b750857da22166913e3ab5b3300f865d5427dc40b57e73b3431e7254a556df5eceabc8639e106f8645fd05d9be7bf01ba9c9595fb3cb9872e5d4b8c21cba42098e6bb495fb52aa37da4b568ae368428b3fcb372743d9db493312f6bbf9267f38ce21ca4bce77fb06a1285e55abc109e30a3ebd064f40ecd587c5493c5bf8ea289ad11d8ab15670a1c3fc589f4ec0328fc4e518023ac58c616d815f82ade54f5bff6e2b11f786bb2126dc8d5bb5d8d00522f73d208e2b9f3389049fce66786c5143087686feec24996101206ae4f08f035a6a64d8730e34d66c4ac4af36c289fb9d6bbfa34bb10d916d17cf813a05f6dfa44d84d8c57e2421cca10e5a57afca7f2307cfbb399be02596818e823f48a65b8c75e5a6ea4f99176c4ae43d5720205432cdf01b5d52e871054886a6ed9640fc7478edf17502787af92a2bdbcdefafadb6e7cbf575305abff448138ea8a70d40e825fd34ab2d3adb2a0808ac87b599c3789069840f49edd58edabcf98b169a5da04d64a6ce5456341bb2d9ca3056a5bdc9a315d97a285fdc5ed9a2521395f071bc36a257615eda0459557344e25b5305b4616411b4acd65524f232db362ada2af7e4a70583da974e7a53b486ac0c127ff3cae12c3829c3d04504a8eb6edf1586726abcf1bd59d47e06a02bba8ba25d2543e92cfb4411ace7f605e59e42eadb80fd8a891df8d8f9f41365e710fafd41ac3ebed804f339e16cbfcdb5d8702ab6583aa3558f4eaab2710efd6a080f38b82b44bd3977eb430c5a0a9310f6aa241d212f262a2be7a4b57a82048ada00324019e7e4a972da0d7f65d275e05d811a1ff8ea54b8d5275ffbcdbd8bbc45c29d6ec4906da29f5511be7815e0bc38bb0e13edea55d11e0283fc31f3012f624f6a74680969b002b63dda9b31218c974520724f872303c8a4139b45b0169bbf0d559f7fdd70cc9daa0c96b550afe056ad24e692d1ec89a7ea90f50a671bad2b02b562a84bc12f757d7fe13877d8a95f47b6ef1dbdb1d1306d25fe4b958e4003e35807af5890f46e482efb977b5e3f7a7bbe32220b5bec67c1d1731968568792849145dbef299b81a3b3fa20d0a1c19de8ca0263a37cde662f926c6b705f9b1c50dc7cfa60b029547b724314732e674ff89e3c1395a896ac85201979a5ce4347b93420ba8ceeca75dcf53623925285c4e0f712e4676cbd6ef0ff2e4c07e1cf370d4b994300b910f2700885924e4b0dfb8d68f9fb3a76148deeef292ac3f91e1358dc6245bbda712f71eaf4017979a81cf88f67e9e0f65a26052fb8d4c65dfc5986f5ce2936521878f8fed28f8dc4a544661a9687a4daa477cbe5e7c1bd585c670c46e75f233b7199f0d86584e4231439429c1203f5af67fdc9d3b4fceb50a3dab6ec74b8c0d28a4c59cc015d2438e15399d4c9c3e6fae856cc223354edeea321d5cec4e6846f6ca0139726970c9b32bebd5ebb3cbf962f1f5b3a02747484276ea9fb4af52e84a9168ff263b270184a09fb6662ef651da1e7ae50f149b49fe9f3f156c47ffdc2a4dabe3207107f8a6d853194b51e45150bc24ed6e94a89796380c121a350a23f70b1a8d26bee1abcb93f62c3a4d4e656495e9c227a938fb8531d3346933db973edffd0fb4933bed3f0c83876fd926be50659d3266577060354a84f38a94fcd8968353485948b49a6ba7d74a6eeb97eef2740d8f4cb8f1a490a67e2d5df27f54679fa89895efca2799118761f34d1b4f559731ced095985138563a4b7041b6ca6b21e3ba46fe61e77e8e9fa293bfbdcc39b2e5ff411b274bff7eea93853a734b298926362d88303cd455046bc6195d30d17573109a28db3bac73473200607feef0cad9e3c73794d1de46e25991907a7ffb5163c8d3df840b01b2e610216ba7f5a8be915a9e86ca8f31964b22379cfdae92965ab314c6f66071df117766fa448e197af7548f6baeb4b164c4ac38446cd81a6a044153ddb4eb5d90a1cdebe058410aac5d0e037edc1f7074cbb6f5a29e64f1f7320e975ef01021aa9fc59308a81355be24e094af7ca8cc734a0611d10bb8bf8583463d19b6c18dec8c90deaee738ee198495d871ada284598cfdbd1199d09d468e9b2b321f6c08deaf4d865f0ac2524cb5e10ef82d22d307df30ca0e512c7cdb74df47835431ad16edec852724ef43c942d31849f7719045e0940bff881d92a63774a2495db5f3551972d1b85d044a6082f968d86b1c7f309d08623fbb666edd58052395ec9f0f79b5b9951d9da314b0ee23eea62312204b4022bc6fcb567b1570c48fdd55b4b15ef32760afd3f478a3dfdd1c9580b99c5da4fd3b22f3b7700f2ea77bd6a3e13bac04895b9b2cb76983593a7c8adf398bed4707fcd232226f85815c12aeb8daaebf9a27fef57eb8a29dea627f9f4796f884b3eb17776a08cf8a9b83754d3712e0c885544b2c0502c3ca12b9f52ec582657408b6de1d144bcec7ebbc3f016d32e4578df63198a8c8b09a46333e672f4e688c660f16bd0d6b27ef7f1c488f58627d67fb69c5b6d6e7bfc013ce27fc1dcfe984515cc82d06276351488f9c19fe98180e633e867b43ffad4b3edd647c60f6d77ab70ccffcf7a2ab7c2f539ef129a372a97c0d5a290a268842879f03857d6b2d9f2c497942e9d7560ab03f4f05e212810aeec56d2fbae4efa14bae5cc01a3a09b5bab940cdd0a569fbb469f5f7c12d2cd38fa56dab11e47249f2f5df10a882382df59619d60b2808cd4c3d0a0095e0ec620d7863a4d7dad100e02fd2ed2dea60f9d1d1c4fc94114f0d510f29760fb97609fc1ae56bf57373c6df2aff13f1f887a574cda8b7f41f6cc80b7687aa0a13230731f497266e1ef81bc5ff2b1b20edb7a01e8398cffd9acff298ed822e8740f90851f917bec063195cc013cbb52824d5b76e1d3ad17f867d431640e7eebd9bac66253ffbbf55e440e7e710f139cc72e1950c2040105be1362be66a1f73e869c576c84d5bcacf59ef516d3e5bcc240cbb51ea360bab4576f20d21cf1267c72a720b8bb1609e222d90a8ddd87946778268619eeac4e54d5d8b2725fde7ba761d8f23389c619dc21b15ece52d326104406db9ebf1e5290170c1da5f269bcbbfb80bedd79ab3b7792fe8f6f12ae33d12b62c3c94c9e82efb52e051d57ffd3891ef395421327198e11cb51eda7da4ba2f9c072b07274dd9237582926e5af193053d949c3ec068d56f5d92c60277f166e386006a0f2ed6d958dda48977e8add3e5df9d41d80d791778a038ba55088cd9c"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:21 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:21 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:21 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x6}, 0x10) 03:00:22 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x1a1300, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x18, @unused=[0x7f, 0x4, 0xd1, 0xffffffff], @name="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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) recvfrom$llc(r3, &(0x7f0000000100)=""/80, 0x50, 0x10000, 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:22 executing program 0: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000880)=0x10, 0x80800) getpeername$llc(r0, &(0x7f00000008c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000900)=0x10) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250700000014000200fc01000000000000000000000000000114000300fe8000000000000000000000000000382600070073797374656d5f753a6f626a6563745f723a6d61696c5f73706f6f6c5f743a733000000008000500e0000002050001000000000008000500e0000001"], 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x800) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x2, 0x1, @start={r2, 0x1, "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", "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"}, [0x8000, 0xa26, 0x8001, 0xb58, 0x5, 0x0, 0x4, 0x0, 0x100000001, 0x10001, 0x3, 0x6, 0xf58, 0x85, 0x2, 0x2, 0x0, 0x9, 0x0, 0x0, 0x9, 0x101, 0x4, 0x6, 0x1ff, 0xe721, 0x4, 0x7f, 0x40, 0xffff, 0xffff, 0x5, 0xfffffffffffffff8, 0xcad6, 0x0, 0xffffffffffffffff, 0x2, 0x90f, 0x1, 0x6, 0x2955, 0x100000001, 0x10001, 0xfffffffffffffffe, 0x3, 0x1d8, 0x10000, 0x2, 0x4, 0x5e, 0x7, 0x8, 0x1000, 0x4, 0x9, 0x101, 0x8, 0x0, 0x8000, 0x7, 0x5, 0x643, 0x6, 0xff]}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40840}, 0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x78dd3bc40a35beb6}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x29}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 03:00:22 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:22 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001780), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001540)={"b73a93fc1ca6a368e5859062c210a2cc", 0x0, 0x0, {0x44}, {0x1, 0x90e}, 0x1, [0x100000001, 0x2, 0x100000000, 0x9, 0x7, 0x7, 0x200, 0x2, 0x8, 0x7, 0x9d, 0x4642974c, 0x2, 0x101, 0x7, 0x3]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001640)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001680)={"141f9b91adf8be94a1b76d37bea527a5", r4, r5, {0x1, 0x400}, {0x9, 0x80}, 0x4, [0x100000000, 0x10001, 0x7, 0x8, 0xdc, 0x80, 0x339b, 0x7ff, 0x8, 0x5, 0x2, 0x45dfd14f, 0x6, 0x3, 0x6, 0x80000000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{r1}, 0x0, 0x6, @inherit={0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000005575937c0c7500a10600000000008000070000000000000002000000000000000100000000000000ea04000000000000faffffffffffffff00000000000000000000000000000000fcdfffffffffffff070000000000000040000000000000000500000000dd14a1e945fd0000000000000000000000ff0100000000000003000000000000045d9fb8b3d02b59a75fcf9d9510157c94e4b2e16831036dffc5e7a6dc23cabd32"]}, @devid=r3}) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0x1f, 0x0, @local, @empty, 0x7, 0x80, 0x100, 0x8}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="146896bc", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x1124919a0f848954}, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000015c0)={'ip6tnl0\x00', &(0x7f0000001540)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x3, 0x7, @mcast2, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x1, 0xc8, 0x1ff}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40054}, 0x4041) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x4, 0x7f, 0x3f, 0x3, 0x0, @mcast2, @remote, 0x10, 0x700, 0x2a5c2da2, 0xef23}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x1, &(0x7f0000000140)=@raw=[@alu={0x0, 0x0, 0xb, 0x2, 0xa, 0x80, 0xfffffffffffffff0}], &(0x7f0000000180)='syzkaller\x00', 0x1a6, 0x10, &(0x7f00000001c0)=""/16, 0x41000, 0x2, [], r2, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xd, 0x8, 0x405}, 0x10}, 0x78) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, r3) r4 = pkey_alloc(0x0, 0x2) pkey_free(r4) r5 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, r5) pkey_mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, r4) 03:00:22 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x28202, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 03:00:22 executing program 4: syz_emit_vhci(0x0, 0x19) socket(0x2b, 0x1, 0x0) 03:00:22 executing program 1: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="497e75f96e5a3d7da04844f5951ff51d6e0d1fd5f8200943891d103c4cd1da7d2e0869f55085922341f74638cde2800a6aeacd93e0b53ef93b79cae2820bf24d9244be0fe1038a221fe9282678b7649b44ced6269899391d86ace89d8716d106f1ac9f52b9f179c3299a6ac076989f8c0926f1f8", 0x74) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 4: syz_emit_vhci(0x0, 0x19) socket(0x2b, 0x1, 0x0) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:00:22 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001780), 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001540)={"b73a93fc1ca6a368e5859062c210a2cc", 0x0, 0x0, {0x44}, {0x1, 0x90e}, 0x1, [0x100000001, 0x2, 0x100000000, 0x9, 0x7, 0x7, 0x200, 0x2, 0x8, 0x7, 0x9d, 0x4642974c, 0x2, 0x101, 0x7, 0x3]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001640)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001680)={"141f9b91adf8be94a1b76d37bea527a5", r4, r5, {0x1, 0x400}, {0x9, 0x80}, 0x4, [0x100000000, 0x10001, 0x7, 0x8, 0xdc, 0x80, 0x339b, 0x7ff, 0x8, 0x5, 0x2, 0x45dfd14f, 0x6, 0x3, 0x6, 0x80000000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{r1}, 0x0, 0x6, @inherit={0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000005575937c0c7500a10600000000008000070000000000000002000000000000000100000000000000ea04000000000000faffffffffffffff00000000000000000000000000000000fcdfffffffffffff070000000000000040000000000000000500000000dd14a1e945fd0000000000000000000000ff0100000000000003000000000000045d9fb8b3d02b59a75fcf9d9510157c94e4b2e16831036dffc5e7a6dc23cabd32"]}, @devid=r3}) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 4: syz_emit_vhci(0x0, 0x19) socket(0x2b, 0x1, 0x0) 03:00:22 executing program 3: syz_emit_vhci(0x0, 0xfffffe5f) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000003, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x10, 0x3f, 0xed, 0x4c, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x8, 0xfffffffa, 0x3}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:00:22 executing program 2: syz_emit_vhci(0x0, 0xfffffffffffffd3f) r0 = socket(0x10, 0xa, 0x9) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x313, 0x3, 0x1, 0x1f, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0xa, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xaae, {0x29, 0x7f, 0x9, 0x100000000, 0x6}, [0x4]}}, @subvolid=0x7}) 03:00:22 executing program 4: socket(0x2b, 0x1, 0x0) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) 03:00:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) munlockall() r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') 03:00:22 executing program 5: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x3ffffff, 0xffffffffffffffff, 0x7) 03:00:22 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:00:22 executing program 4: socket(0x0, 0x1, 0x0) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 3: socket(0x2b, 0x1, 0x0) 03:00:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x940080}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404880d}, 0x400) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000a426f8a3b9e56aa772900e46a5db971d7de99d199f38886be3d5c0d9be6c11e84c5b07a515237e46bc617ad61e3993002e29f17f703e13d214923e8e82aed48a3cbe3d34f29d3601586cd30ca1bfa1bb3f2ee6316ad8655ac66173215aa654b25d296e151b2ccdb10bb419eacbbb9645fe97e0d33c83d8a2220af023f4bfb560fd9a192b0f55c77c850ba587726c3917e6c58f1357b7c3c482b0b1f044ba8b015018f574e85748ed19f5e9e57b", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf25010000002900070073797374656d5f753a6f626a6563745f723a7465787472656c5f73686c69625f743a733000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40104}, 0x4000801) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc8c0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:22 executing program 4: socket(0x0, 0x1, 0x0) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x22903, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, r0) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) 03:00:22 executing program 3: socket(0x2b, 0x1, 0x0) 03:00:22 executing program 4: socket(0x0, 0x1, 0x0) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:22 executing program 5: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x810, 0xffffffffffffffff, 0xfffffffffffffffe) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x141703, 0x0) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x4) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 03:00:22 executing program 3: socket(0x2b, 0x1, 0x0) 03:00:22 executing program 4: socket(0x2b, 0x0, 0x0) 03:00:22 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1000004, r1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 03:00:22 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x940080}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404880d}, 0x400) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000a426f8a3b9e56aa772900e46a5db971d7de99d199f38886be3d5c0d9be6c11e84c5b07a515237e46bc617ad61e3993002e29f17f703e13d214923e8e82aed48a3cbe3d34f29d3601586cd30ca1bfa1bb3f2ee6316ad8655ac66173215aa654b25d296e151b2ccdb10bb419eacbbb9645fe97e0d33c83d8a2220af023f4bfb560fd9a192b0f55c77c850ba587726c3917e6c58f1357b7c3c482b0b1f044ba8b015018f574e85748ed19f5e9e57b", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf25010000002900070073797374656d5f753a6f626a6563745f723a7465787472656c5f73686c69625f743a733000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40104}, 0x4000801) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc8c0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:22 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r1, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], 0x1}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 03:00:22 executing program 3: socket(0x0, 0x1, 0x0) 03:00:22 executing program 4: socket(0x2b, 0x0, 0x0) 03:00:22 executing program 0: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, r1) 03:00:22 executing program 3: socket(0x0, 0x1, 0x0) 03:00:22 executing program 4: socket(0x2b, 0x0, 0x0) 03:00:22 executing program 0: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 3: socket(0x0, 0x1, 0x0) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x36038542, 0xc54, &(0x7f0000000040)=0x20}) 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, r1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) rt_sigaction(0x29, &(0x7f0000000140)={&(0x7f00000000c0)="47d9e8c422ad3898f0ffffffc441a1f5366546b200c4a29db85ab646dfc43666640fb3c5c423216d390066450f1ee16647eb09", 0x40000003, &(0x7f0000000100)="8fe978e137c4a13ddf2e3e660fe0fb26660f382a2fe134660f1bf5c421195806dff0aef2400f5db5a92c57b9", {[0x8000]}}, &(0x7f0000000200)={&(0x7f0000000180)="8f8978d30ce2c402d59664a4ddc4024903c6440fae14d02eadc4417853447208650f0feeb0c401f77d1826660f3a621b0a653e6436f20f12c5", 0x0, &(0x7f00000001c0)="67430f8e0600000066430f381d7668f0f71b22e7c403bd7d4934f2437a1fafc4e1f96bc0660f3830d864f3430f1bc6"}, 0x8, &(0x7f0000000240)) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:23 executing program 0: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r1, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], 0x1}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x36038542, 0xc54, &(0x7f0000000040)=0x20}) 03:00:23 executing program 3: socket(0x2b, 0x0, 0x0) 03:00:23 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)={0x0, 0x36038542, 0xc54, &(0x7f0000000040)=0x20}) 03:00:23 executing program 3: socket(0x2b, 0x0, 0x0) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:23 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x8, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, [], 0x2c}, 0x8, 0x8, 0x7, 0xb4f}}) 03:00:23 executing program 2: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x19) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) 03:00:23 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 3: socket(0x2b, 0x0, 0x0) 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x6a643005fc7d6c98) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000040)={0x1, 0x5, @status={[0x57e, 0x2, 0x6, 0x7f, 0x40, 0x9]}, [0x3, 0x3f, 0xfffffffffffffff8, 0x4, 0x4, 0x80, 0x6, 0x1000, 0xffffffffffff0669, 0x1, 0x7ff, 0x3, 0x6, 0x0, 0x6, 0x1, 0x1, 0xfffffffffffffffe, 0x9, 0x1, 0x6bb, 0x10001, 0x3, 0x0, 0x7fffffff, 0x5, 0x5, 0xfffffffffffffffc, 0x10000, 0x3, 0x0, 0x97, 0x100, 0x37f000, 0x0, 0x4c, 0x1ff, 0x9, 0x4, 0x7ff, 0x4, 0x1, 0xffff, 0x5, 0x6, 0xfffffffffffffff8, 0x8, 0x6, 0xaf6, 0x6, 0x2, 0x6, 0x5, 0x2, 0xcd73, 0xed, 0xffffffffffffff4e, 0x5, 0x7, 0x4, 0x7, 0x50, 0x100000001, 0x7]}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) socketpair(0x29, 0x80000, 0x8, &(0x7f0000000a80)) 03:00:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x4c) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x284041) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x1f, 0x6, 0x7da, 0x5, 0x4, 0x4, 0x3, 0x2, 0xdee, 0x5}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 3: syz_emit_vhci(0x0, 0x19) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x200042) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4, 0x0, 0x7, 0x31a, 0xad, 0x0, 0x9, 0x729, 0x1}) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x2, 0x3, 0x30, 0x3, 0x0, 0x0, 0x80000, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2cf, 0x0, @perf_bp={&(0x7f0000000080)}, 0x5, 0xfffffffffffffffd, 0x800, 0x6, 0x0, 0x3f, 0x8000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/57) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xff) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x24008040) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r1, 0xfc0000) 03:00:23 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x2, 0x80, 0x3, 0x80000001, 0x0, 0x5, 0x1ff, 0x6, 0x1ff, 0x3, 0xe2d4}) r1 = accept4(r0, &(0x7f00000016c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001740)=0x80, 0x80800) getsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000001780)=""/142, &(0x7f0000001840)=0x8e) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000080)) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x0) 03:00:23 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x7, 0x2, 0x8, 0x100, 0x1, 0x8, [], 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x40) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x22200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xa, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff6}, @exit, @ldst={0x1, 0x0, 0x6, 0xb, 0x9, 0x100, 0x1}, @map={0x18, 0xd, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff7}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xb7, &(0x7f0000000180)=""/183, 0x41100, 0x2, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x0, 0x1000}, 0x10, 0xffffffffffffffff}, 0x78) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x249480, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000001480)='SMC_PNETID\x00') r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r4, 0x3) 03:00:23 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x3ffffff, 0xffffffffffffffff, 0x1ff) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x0) 03:00:23 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 03:00:23 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x7f, 0xe8, 0x3, 0x0, 0x1, 0x0, 0xd849ed84154b47b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, 0x2, @perf_config_ext={0x318, 0x7}, 0x10, 0x100000001, 0x6, 0x6, 0x7, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='cpu.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000011c0)=0x7) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x8000) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000000c0)={{}, 0x0, 0x0, @unused=[0x2b7, 0xe83, 0xe6a, 0xdd08], @name="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"}) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0), 0x8) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x110, r2, 0xffff) r3 = openat$cgroup_ro(r1, &(0x7f0000001200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) 03:00:23 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) pkey_free(r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x48280, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7fff, 0x4080) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 03:00:23 executing program 4: syz_emit_vhci(0x0, 0x0) 03:00:23 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 03:00:23 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:23 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r3 = pkey_alloc(0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, r3) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, r3) 03:00:23 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x810, 0xffffffffffffffff, 0x3) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x2}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0xfffffffffffffdce) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x244141, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) 03:00:23 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x1000, 0x10}, 0xc) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) 03:00:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'ipvlan0\x00', @ifru_ivalue}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000040)={{}, 0x0, 0x0, @unused=[0x81, 0x5, 0x80000000, 0xff], @subvolid=0x2}) 03:00:23 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000c40)={'macvlan0\x00', @ifru_addrs=@can}) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) 03:00:23 executing program 4 (fault-call:0 fault-nth:0): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:23 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) [ 1635.470058] FAULT_INJECTION: forcing a failure. [ 1635.470058] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.509528] CPU: 0 PID: 23901 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 03:00:23 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000c40)={'macvlan0\x00', @ifru_addrs=@can}) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:00:23 executing program 3: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:23 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000c40)={'macvlan0\x00', @ifru_addrs=@can}) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) [ 1635.517501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.528461] Call Trace: [ 1635.531097] dump_stack+0x1b2/0x281 [ 1635.534742] should_fail.cold+0x10a/0x149 [ 1635.538935] should_failslab+0xd6/0x130 [ 1635.542920] kmem_cache_alloc_node+0x263/0x410 [ 1635.547515] __alloc_skb+0x5c/0x510 [ 1635.551162] vhci_write+0xb1/0x420 [ 1635.554708] __vfs_write+0x44c/0x630 [ 1635.558458] ? kernel_read+0x110/0x110 [ 1635.562372] ? rw_verify_area+0xe1/0x2a0 [ 1635.566484] vfs_write+0x17f/0x4d0 03:00:24 executing program 3: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:24 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2c0, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x60000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1fd800}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xee3}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4800}, 0x5) [ 1635.570038] SyS_write+0xf2/0x210 [ 1635.573504] ? SyS_read+0x210/0x210 [ 1635.577139] ? __do_page_fault+0x159/0xad0 [ 1635.581408] ? do_syscall_64+0x4c/0x640 [ 1635.585401] ? SyS_read+0x210/0x210 [ 1635.589031] do_syscall_64+0x1d5/0x640 [ 1635.592930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1635.598151] RIP: 0033:0x417ab1 [ 1635.601338] RSP: 002b:00007f5fbe3d8c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1635.609051] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 1635.616343] RDX: 000000000000004c RSI: 0000000020000000 RDI: 00000000000000f1 [ 1635.623623] RBP: 00007f5fbe3d8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.630899] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1635.638176] R13: 00007ffd19c2af4f R14: 00007f5fbe3d99c0 R15: 000000000119bf8c 03:00:24 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00'}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x115400, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 03:00:24 executing program 3: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:24 executing program 0 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:24 executing program 4 (fault-call:0 fault-nth:1): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) [ 1635.726002] FAULT_INJECTION: forcing a failure. [ 1635.726002] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.728636] FAULT_INJECTION: forcing a failure. [ 1635.728636] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.753948] CPU: 1 PID: 23928 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1635.761894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.771368] Call Trace: [ 1635.773971] dump_stack+0x1b2/0x281 [ 1635.777615] should_fail.cold+0x10a/0x149 [ 1635.781779] should_failslab+0xd6/0x130 [ 1635.785762] kmem_cache_alloc+0x28e/0x3c0 [ 1635.789919] __split_vma+0xc8/0x6c0 [ 1635.793550] split_vma+0x85/0xc0 [ 1635.796930] mprotect_fixup+0x671/0x8c0 [ 1635.800908] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1635.805837] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1635.811051] ? change_protection+0xa0/0xa0 [ 1635.815290] ? lock_acquire+0x170/0x3f0 [ 1635.819268] ? do_mprotect_pkey+0x165/0x7e0 [ 1635.823594] ? apparmor_file_mprotect+0x101/0x140 [ 1635.828450] ? security_file_mprotect+0x83/0xb0 [ 1635.833150] do_mprotect_pkey+0x44a/0x7e0 [ 1635.837316] ? mprotect_fixup+0x8c0/0x8c0 [ 1635.841464] ? SyS_write+0x14d/0x210 [ 1635.845172] ? SyS_read+0x210/0x210 [ 1635.848804] SyS_pkey_mprotect+0x27/0x30 [ 1635.852872] ? SyS_mprotect+0x30/0x30 [ 1635.856704] do_syscall_64+0x1d5/0x640 [ 1635.860603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1635.865817] RIP: 0033:0x45e219 [ 1635.869005] RSP: 002b:00007fd9127cfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) 03:00:24 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket(0x23, 0x5, 0x0) accept4$llc(r1, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x2) getsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"cd712fa0530160b3be53cd985ad89055", r3, r4, {0x4, 0x40}, {0x3, 0x4}, 0x100, [0x1f, 0x3, 0x802000, 0x6521, 0x2, 0x3, 0xffffffff, 0x5, 0x0, 0x7, 0x4, 0x4, 0x7fff, 0x3, 0x6e, 0xffff]}) [ 1635.876733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1635.884065] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020003000 [ 1635.891370] RBP: 00007fd9127cfca0 R08: 0000000000000000 R09: 0000000000000000 [ 1635.898646] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1635.905942] R13: 00007ffc88614c2f R14: 00007fd9127d09c0 R15: 000000000119bf8c [ 1635.913250] CPU: 0 PID: 23929 Comm: syz-executor.4 Not tainted 4.14.217-syzkaller #0 [ 1635.921153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1635.930599] Call Trace: [ 1635.933199] dump_stack+0x1b2/0x281 [ 1635.936835] should_fail.cold+0x10a/0x149 [ 1635.940992] should_failslab+0xd6/0x130 [ 1635.944988] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1635.950105] __kmalloc_node_track_caller+0x38/0x70 [ 1635.955069] __alloc_skb+0x96/0x510 [ 1635.958713] vhci_write+0xb1/0x420 [ 1635.962263] __vfs_write+0x44c/0x630 [ 1635.966109] ? kernel_read+0x110/0x110 [ 1635.970017] ? rw_verify_area+0xe1/0x2a0 03:00:24 executing program 0 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:24 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1635.974086] vfs_write+0x17f/0x4d0 [ 1635.977637] SyS_write+0xf2/0x210 [ 1635.981212] ? SyS_read+0x210/0x210 [ 1635.984849] ? __do_page_fault+0x159/0xad0 [ 1635.989103] ? do_syscall_64+0x4c/0x640 [ 1635.993086] ? SyS_read+0x210/0x210 [ 1635.996739] do_syscall_64+0x1d5/0x640 [ 1636.000654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1636.002132] FAULT_INJECTION: forcing a failure. [ 1636.002132] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.005847] RIP: 0033:0x417ab1 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 03:00:24 executing program 4 (fault-call:0 fault-nth:2): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:24 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1636.005853] RSP: 002b:00007f5fbe3d8c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1636.005864] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1 [ 1636.005870] RDX: 000000000000004c RSI: 0000000020000000 RDI: 00000000000000f1 [ 1636.005876] RBP: 00007f5fbe3d8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.005881] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1636.005893] R13: 00007ffd19c2af4f R14: 00007f5fbe3d99c0 R15: 000000000119bf8c 03:00:24 executing program 5: socket$caif_seqpacket(0x25, 0x5, 0x2) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:24 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 03:00:24 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x4f}, @l2cap_cid_signaling={{0x4b}, [@l2cap_conn_rsp={{0x3, 0x7f, 0x8}, {0x0, 0x2, 0x8, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x1f, 0x4}, {0x1, 0xfffc}}, @l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0x8, 0x100, 0x12}}, @l2cap_create_chan_rsp={{0xd, 0xe2, 0x8}, {0x9, 0x25, 0x90, 0xedc}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x6, 0x100, 0x2, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x1f, 0x4}, {0x5, 0xca8}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x6, 0x6b9}}, @l2cap_info_req={{0xa, 0x7f, 0x2}, {0x3}}]}}, 0x54) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"dcbe90e428666531d7b4ef96d10d5872", 0x0, 0x0, {0x3}, {0x1, 0x5}, 0xdfa, [0xfffffffffffffffd, 0x2, 0x8, 0x7, 0x5, 0x1, 0x8, 0x5, 0x4, 0x9, 0x7fffffff, 0x0, 0x7d, 0xfff, 0x400, 0x7ff]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001380)={r1}, 0x8) perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x70, 0x3f, 0x7, 0x8, 0xf8, 0x0, 0x4, 0x60302, 0x18, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000001280), 0x1}, 0x0, 0x100, 0x5, 0x1, 0x9, 0x7fffffff, 0xfe01}, r4, 0x3, r5, 0x4) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000280)={{r2}, r3, 0x14, @inherit={0x60, &(0x7f0000000200)={0x1, 0x3, 0x1, 0x20, {0x1a, 0x793c, 0x5, 0xd5, 0x3}, [0x200, 0x2, 0xb2]}}, @subvolid=0x8}) [ 1636.167082] CPU: 1 PID: 23941 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1636.175219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1636.184599] Call Trace: [ 1636.187194] dump_stack+0x1b2/0x281 [ 1636.190831] should_fail.cold+0x10a/0x149 [ 1636.194990] should_failslab+0xd6/0x130 [ 1636.198972] kmem_cache_alloc+0x40/0x3c0 [ 1636.203072] anon_vma_clone+0xe0/0x5b0 [ 1636.206963] __split_vma+0x282/0x6c0 [ 1636.210694] split_vma+0x85/0xc0 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, r0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 1636.214099] mprotect_fixup+0x671/0x8c0 [ 1636.218084] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1636.223050] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1636.228082] ? change_protection+0xa0/0xa0 [ 1636.232335] ? lock_acquire+0x170/0x3f0 [ 1636.236310] ? do_mprotect_pkey+0x165/0x7e0 [ 1636.240667] ? apparmor_file_mprotect+0x101/0x140 [ 1636.245546] ? security_file_mprotect+0x83/0xb0 [ 1636.250246] do_mprotect_pkey+0x44a/0x7e0 [ 1636.254400] ? mprotect_fixup+0x8c0/0x8c0 [ 1636.258549] ? SyS_write+0x14d/0x210 [ 1636.262277] ? SyS_read+0x210/0x210 [ 1636.265911] SyS_pkey_mprotect+0x27/0x30 [ 1636.269975] ? SyS_mprotect+0x30/0x30 [ 1636.273778] do_syscall_64+0x1d5/0x640 [ 1636.277688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1636.282879] RIP: 0033:0x45e219 [ 1636.286089] RSP: 002b:00007fd9127cfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1636.293807] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1636.301091] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020003000 [ 1636.308509] RBP: 00007fd9127cfca0 R08: 0000000000000000 R09: 0000000000000000 03:00:24 executing program 0 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:24 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0xa0, 0xa5, 0x2, 0x1}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x2, 0xd58}}, @l2cap_info_req={{0xa, 0x32, 0x2}, {0xf221}}, @l2cap_conf_req={{0x4, 0x2, 0xf}, {0x7ff, 0xaf, [@l2cap_conf_mtu={0x1, 0x2, 0xfff}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x3}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0xa200, 0xc, 0x38d, 0x2}}, @l2cap_move_chan_cfm={{0x10, 0xd1, 0x4}, {0x6, 0x4}}]}}, 0x50) 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) 03:00:24 executing program 5: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'hsr0\x00', @broadcast}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000080)={"955067c74c09d1010401925bfcac81a9", r1, r1, {0x5, 0x6}, {0x2, 0x2}, 0x7, [0x0, 0x2, 0x5, 0x401, 0x0, 0x81, 0x1, 0x8, 0x5, 0x1, 0x400, 0xffffffffffffffff, 0x2, 0x1, 0x100000001, 0xdf6]}) 03:00:24 executing program 3: socket$caif_seqpacket(0x25, 0x5, 0x2) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) [ 1636.315792] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1636.323071] R13: 00007ffc88614c2f R14: 00007fd9127d09c0 R15: 000000000119bf8c 03:00:24 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x7) 03:00:24 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:24 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) [ 1636.393620] Bluetooth: hci0 ACL packet for unknown connection handle 0 [ 1636.402332] FAULT_INJECTION: forcing a failure. [ 1636.402332] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.402922] Bluetooth: hci0 ACL packet for unknown connection handle 0 03:00:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003240)='devices.list\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)) [ 1636.477149] CPU: 1 PID: 23975 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1636.485078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1636.495138] Call Trace: [ 1636.497733] dump_stack+0x1b2/0x281 [ 1636.501366] should_fail.cold+0x10a/0x149 [ 1636.505528] should_failslab+0xd6/0x130 [ 1636.509525] kmem_cache_alloc+0x28e/0x3c0 [ 1636.513718] __split_vma+0xc8/0x6c0 [ 1636.517359] split_vma+0x85/0xc0 [ 1636.520750] mprotect_fixup+0x6e3/0x8c0 03:00:24 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x8, 0x9, 0x4, 0x1f, 0x0, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, @perf_config_ext={0x5, 0x37}, 0xc14d, 0x6, 0x8000000, 0x2, 0x0, 0x2e73, 0x1000}, r0, 0x0, 0xffffffffffffffff, 0x8) [ 1636.524754] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1636.529704] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1636.534734] ? change_protection+0xa0/0xa0 [ 1636.538992] ? lock_acquire+0x170/0x3f0 [ 1636.542971] ? do_mprotect_pkey+0x165/0x7e0 [ 1636.547309] ? apparmor_file_mprotect+0x101/0x140 [ 1636.552163] ? security_file_mprotect+0x83/0xb0 [ 1636.556845] do_mprotect_pkey+0x44a/0x7e0 [ 1636.561009] ? mprotect_fixup+0x8c0/0x8c0 [ 1636.565171] ? SyS_write+0x14d/0x210 [ 1636.568898] ? SyS_read+0x210/0x210 [ 1636.572537] SyS_pkey_mprotect+0x27/0x30 03:00:25 executing program 5: mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x2010, 0xffffffffffffffff, 0x0) [ 1636.576608] ? SyS_mprotect+0x30/0x30 [ 1636.580422] do_syscall_64+0x1d5/0x640 [ 1636.584330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1636.589536] RIP: 0033:0x45e219 [ 1636.592734] RSP: 002b:00007fd9127cfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1636.600624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1636.608000] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020003000 [ 1636.615362] RBP: 00007fd9127cfca0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.622641] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1636.629949] R13: 00007ffc88614c2f R14: 00007fd9127d09c0 R15: 000000000119bf8c 03:00:25 executing program 0 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) 03:00:25 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xae}, "4c71e777f7cb72f730743cd1f59d9c69b6af9881f569f245fe5b138f15295dadff3b5a53302de6bb63917d7463ea9a2435709f60bb31439b54a63f153e7d3516732226d962953bce276c617c3807080fe53adebb662125395387c0cfd2e8f2149767c73881c90c691c433c82a007e4fc7e9bad5a2243ba924888f432a16205ed82dbdbdce63fedb48feb2d3dde2f84e2996e60b46f86161a2dd40c5b5575cebd393d69aeef5bf1fe4c6cc0fce840"}, 0xb2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') 03:00:25 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000000)={{}, 0x0, 0xe, @unused=[0x5, 0x8979, 0x5, 0x5], @subvolid=0x100000001}) 03:00:25 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x6, 0x2f, @mcast2, @remote, 0x10, 0x10, 0xb2, 0x2}}) 03:00:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'ipvlan0\x00', @ifru_ivalue}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000040)={{}, 0x0, 0x0, @unused=[0x81, 0x5, 0x80000000, 0xff], @subvolid=0x2}) 03:00:25 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 4: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) [ 1636.741197] FAULT_INJECTION: forcing a failure. [ 1636.741197] name failslab, interval 1, probability 0, space 0, times 0 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') [ 1636.811406] CPU: 1 PID: 24003 Comm: syz-executor.0 Not tainted 4.14.217-syzkaller #0 [ 1636.819373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1636.828734] Call Trace: [ 1636.831343] dump_stack+0x1b2/0x281 [ 1636.835063] should_fail.cold+0x10a/0x149 [ 1636.839221] should_failslab+0xd6/0x130 [ 1636.843202] kmem_cache_alloc+0x40/0x3c0 [ 1636.847277] anon_vma_clone+0xe0/0x5b0 [ 1636.851209] __split_vma+0x282/0x6c0 [ 1636.854938] split_vma+0x85/0xc0 [ 1636.858313] mprotect_fixup+0x6e3/0x8c0 [ 1636.862290] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1636.867223] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1636.872278] ? change_protection+0xa0/0xa0 [ 1636.876697] ? lock_acquire+0x170/0x3f0 [ 1636.880676] ? do_mprotect_pkey+0x165/0x7e0 [ 1636.885017] ? apparmor_file_mprotect+0x101/0x140 [ 1636.889871] ? security_file_mprotect+0x83/0xb0 [ 1636.894551] do_mprotect_pkey+0x44a/0x7e0 [ 1636.898726] ? mprotect_fixup+0x8c0/0x8c0 [ 1636.902877] ? SyS_write+0x14d/0x210 [ 1636.906598] ? SyS_read+0x210/0x210 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 03:00:25 executing program 5: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xf10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) [ 1636.910235] SyS_pkey_mprotect+0x27/0x30 [ 1636.914300] ? SyS_mprotect+0x30/0x30 [ 1636.918118] do_syscall_64+0x1d5/0x640 [ 1636.922146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1636.927369] RIP: 0033:0x45e219 [ 1636.930563] RSP: 002b:00007fd9127cfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1636.938283] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1636.945563] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020003000 [ 1636.952846] RBP: 00007fd9127cfca0 R08: 0000000000000000 R09: 0000000000000000 03:00:25 executing program 0 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:25 executing program 2: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 03:00:25 executing program 3: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000000)={{}, 0x0, 0xe, @unused=[0x5, 0x8979, 0x5, 0x5], @subvolid=0x100000001}) 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) [ 1636.960154] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 1636.967429] R13: 00007ffc88614c2f R14: 00007fd9127d09c0 R15: 000000000119bf8c 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:25 executing program 2: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"7d1181056dd16c7be0c5c10d3eb8052f", 0x0, 0x0, {0x5457, 0x6}, {0x8, 0x9}, 0x1, [0x0, 0x9, 0x7, 0x0, 0x7, 0xf0, 0xffff, 0x8, 0x7, 0x83, 0x5, 0x1, 0xbf, 0x2, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000002c0)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f8000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f6966795f70656572735f696e74657276616c0000000000000000000000050003000300734991d34dd3d4cf0101938659113e7d000000000400030000003c00010024000100656e61c76c656400000000000000000800"/111, @ANYRES32=r2, @ANYBLOB], 0x114}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 03:00:25 executing program 2: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x10, 0x99b3, 0x6561, 0x6, 0x30, 0x4, 0xfffffffc, 0x4}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x1f, 0x7, 0xff, 0x9, 0x0, 0x80, 0x20041, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x200, 0x1, 0x5, 0x5, 0xfffffffffffffffa, 0x5, 0x7}, r1, 0x7, 0xffffffffffffffff, 0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000100), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x422200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'caif0\x00', @dev}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000240)) socket$can_raw(0x1d, 0x3, 0x1) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) socket$vsock_stream(0x28, 0x1, 0x0) 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) 03:00:25 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 03:00:25 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001140)={0x2, 0x3, @start={0x0, 0x0, "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", "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"}, [0x7, 0xed5, 0x8, 0x62e6, 0x9af9, 0x7, 0x1, 0x3, 0x6, 0x7, 0x5, 0x10001, 0x74545a0a, 0x705, 0x1f, 0x80000000, 0x500, 0xdb05, 0x2dce, 0x400, 0x10000, 0x2, 0x4, 0x1, 0xffffffffffff1a67, 0xffff, 0x1ff, 0xffffffff, 0x80, 0x6, 0x4, 0xb2, 0x2d7, 0x7, 0xe2, 0x3, 0x6, 0x1, 0x5, 0x800, 0x901, 0x101, 0x7fffffff, 0x1, 0x8001, 0xc5c, 0x6, 0x0, 0x6, 0xc8c, 0x9, 0x1, 0xffff, 0x7ff, 0x3, 0x2, 0x0, 0x8000, 0x3, 0x0, 0x20, 0x8, 0x2, 0x100000001]}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001b80)={0x1, 0x9, @start={r1, 0x3, "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", "1e89facbd9f2479917ecc5de2aabf897cb699f856d0ee71cca19703159fd4fdd3a4025bc7db7748f1b87baaa46c07db58c77ff46247ad3ffa3865d24caa9e5e7655819907aa2d95c400d801c67028d7ed53e0899c3d664b75176e5f402210570838854ef00de3152942132b00c59c3d879642a33164a4c13a96549cc1d496935a40c9ea9777223440ce858b56b40410d1ea8401eb3f94f6a3a2de6876f565e4c1baa0b721765be7205e3afa2b98de813557138c75180f7cd16052161b985e66e92fdeb49af66733ee0aeacb168854622503d8dc8bbd4e89a2bc12c929a9c0b5fb09086632ec43248dbae5ecf1692c0a54433e39815b764b93950f9ec2722aaa4aa204315111a30e31600cea7dc348b4738f3356b6328422a954d0cc21678475c5bd29aa0c3592b237d73512ead5324e22388e9f4fbf30e5449a6ff51f4e8ae5144f73f7dbcf535cf400878b4a38370b877930a5476f05ee21c4b72ae381c02cb396ea294ea47fb785f11ab59e707115d16dea02732c7843a884dab566b81612d04ee573c944513d9fe3ed9362305755ae4966d51d839d89e86140d1ce0d21eee5beb92a470509a1e7d3246e07504d042c65787a240b1951eccb8a90706a75df1f3eca27a1ba528f62cc5e5097bbe406a0e4b48844ef3f7bac61c2089b6d9cc18416e1645530acaccbe8c91e171675f87cb6a3f74f539e422a3b81eca8cadff305fe90ce35721ef986a990fd8de059046198a989de64414804f3f2d0d4954ff5da1245e7aff1030f5a99ed801ce60bfe7dfefc9d80d64d8df13e808976ca3de83874b330e9aade529b63740f33ab5ededc3a2e1e42e1e3b69432134a63066178f42725ee347bd8a75cfe12a9c5a30b4ce34d9f40fa2d163c592cf42055737e44c9d3c9a1ddea656a0c142f7f217e837eea503347cb76844b65f5b63a3df09eddab2fd26e7f3b29618ac0631741f6e50f42c6484557ad507ec95632749027a7554cb1a47878071042a3fff69b661c980d7561e1fb8c467b8d25b76920352e4f3e577acf4bff6713703a31ed18ccaf8e6eac0828cca3ea27405f9a5130037d0b47b32d7dc57dab4abea05525ad85874c154a298b15d644eef059e8bfbc85dc473234304d448035a82f52efbf0959390774f9a2fec194ee8ab5bb6d630739dd9c070786552f79d40acb48d71b81f292c4922b66be448c5ff661f79b0246816e459970e06b8f3ff5f02526912c910dbbbad4f8377ddc20c89e81fc3dba44015a18d0fa0cf7ab769cef5e039e3fef0587b1908d486309611edfba047c193ebdac53a7be6e480f071ec3785bfd81007274fc1646ebd519dd85194b3641eb5699122398963cff96e9d764d67fd40bd0f5013d88c326c42794f05ab8c77eb55d437c3f684c5ad5bb4fdd741b61134acb608c83ed87be4fdcdf9cf0fbe18b13bb25ee8e642d5"}, [0xffffffffffff0001, 0x8, 0x6, 0xac, 0x9, 0x1f, 0x6, 0x9, 0x7, 0xffffffffffffffc1, 0x200, 0xffffffffffff8000, 0xd63, 0x4, 0xb44, 0xffffffffffffff7b, 0x4, 0x36fe, 0x6, 0x7f, 0x7ff, 0x2, 0x10000, 0x6, 0x5, 0x1, 0x6, 0x5, 0x9, 0xb07, 0x2, 0x5, 0x4, 0x3, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1f, 0xbad0, 0x1, 0xfffffffeffffffff, 0x2, 0x0, 0x7fffffff, 0x4, 0x10001, 0x9, 0x2, 0x80000000, 0x7, 0x4, 0x47, 0x7, 0x5, 0x8000, 0xfffffffffffffc00, 0xffffffffffff7fff, 0x7fff, 0x3c, 0x9, 0x6, 0xffff]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000fd87d0109f14338cbca02cfe1561be7772c3edfcdad154b9009b4459f7a33bfced7123a132fae0156900ff9a68cc60f664a02480b0c09b70795043d890c739206ce7f21fea415c8fe4cc515f49deba98b7b87164fd7513d72cb339f7c5d5418a6f2837518319989a4ea1ceebd66329f728a6f64a22d0927518791ff1ebad4791ef37af56b9ea7c615e6ae4", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25040000000800020002000000080003000100000008000300070000000800020001000000140001800800060001000000080003000000000008000200010000000800020008000000"], 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x20040815) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:25 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x7) 03:00:25 executing program 1: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x7b}, @l2cap_cid_signaling={{0x77}, [@l2cap_conf_req={{0x4, 0x1, 0x13}, {0x1000, 0x0, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x20}]}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x8001, 0x5}}, @l2cap_conf_rsp={{0x5, 0x1, 0x45}, {0x800, 0x0, 0x400, [@l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0x76, 0x1, 0x1ff, 0x6, 0x80, 0x6}}, @l2cap_conf_flushto={0x2, 0x2, 0xd5}, @l2cap_conf_ews={0x7, 0x2, 0x65}, @l2cap_conf_ews={0x7, 0x2, 0x401}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x2, 0x1000, 0x2, 0x391dbfaa, 0x22}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x40}]}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x8}}, @l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x0, 0x7, 0xe1}}]}}, 0x80) 03:00:25 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x440000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x39}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a4000004974d46701e6f3cc5bb6b846b32bc48a398bcbac5413cf64479e9c091bbef34ce44bc0df1c92026e22754e2cf867f3bde738cd7d816172510d77f984d33d954fbd7e3f2ad628f3c815eddd126c55f45c1fc6a5cae6837297ff719c7f5201f4a8e4ff7a96163033cb822b57472a9cf85b08b2b20150f12072fe8d1d2ba7ab74fc3e06600c7fdb9fd1b", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250500000008000300020000000800030005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x3ffffff, 0xffffffffffffffff, 0x7) 03:00:25 executing program 1: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x9, 0x6, 0x6, 0x5, 0x4, 0x9, 0x3d, 0x2, 0x8, 0x81, 0x80000000}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000003c0)={0x18, 0x5, {0x1, @struct={0x2, 0x1}, 0x0, 0xa6d7, 0x1000, 0x1, 0x3, 0x3e14, 0x8, @struct={0x500000, 0x3f}, 0x400, 0x60000000, [0x400, 0x5, 0x0, 0xed, 0x7fff, 0x1]}, {0x80000001, @usage=0x10001, 0x0, 0x12, 0x1, 0x44, 0x6, 0x9000000000, 0x0, @struct={0x5, 0x8001}, 0x1f, 0xf647, [0x7, 0x100000000, 0xfffffffffffffffd, 0x5, 0xffffffff, 0x401]}, {0xfabf, @struct={0x6}, 0x0, 0x10000, 0x0, 0x8, 0xffc00000000000, 0x4, 0x420, @struct={0x2e, 0x7}, 0x1, 0x3af, [0x0, 0x80000000, 0x7fffffff, 0x0, 0x80000000, 0x3]}, {0xfffffffffffffe01, 0x7}}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"6f69d2f4f674223a1d8c81e530e235cf", 0x0, 0x0, {0x80000000, 0x7f}, {0x4, 0x1f}, 0x7, [0x0, 0x7, 0x80000001, 0x180, 0x39, 0x1, 0x8, 0x1f, 0x0, 0x80000001, 0x0, 0x6, 0x7fffffff, 0x2a, 0x3, 0x3f]}) 03:00:25 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 3 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0xe0, 0xc8, 0x1f, 0x5a, "2a9a124c96e866f3"}}}, 0x10) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x7, 0x1f, 0x9, 0x9, 0x0, 0xb4d, 0x68010, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x40020, 0x3f, 0xe9, 0x0, 0x40b, 0x51, 0x10}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) 03:00:25 executing program 1: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1637.421118] FAULT_INJECTION: forcing a failure. [ 1637.421118] name failslab, interval 1, probability 0, space 0, times 0 03:00:25 executing program 2 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x254180) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"9ca9798a926611f07ac766a8d5f823d1", 0x0, 0x0, {0x5, 0x7fff}, {0x7, 0x4}, 0x7f, [0xfffffffffffffff9, 0x101, 0xfffffffffffffff7, 0x0, 0x100000000, 0xb52, 0xffff, 0x7, 0x6, 0x1, 0x8, 0xfff, 0x100000000, 0x8001, 0x401, 0x4]}) 03:00:25 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:00:25 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) [ 1637.465565] CPU: 1 PID: 24078 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1637.473548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.482917] Call Trace: [ 1637.485522] dump_stack+0x1b2/0x281 [ 1637.489178] should_fail.cold+0x10a/0x149 [ 1637.493345] should_failslab+0xd6/0x130 [ 1637.497339] kmem_cache_alloc+0x28e/0x3c0 [ 1637.501708] __split_vma+0xc8/0x6c0 [ 1637.505372] split_vma+0x85/0xc0 [ 1637.508746] mprotect_fixup+0x671/0x8c0 [ 1637.512726] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1637.517765] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1637.522796] ? change_protection+0xa0/0xa0 [ 1637.527071] ? lock_acquire+0x170/0x3f0 [ 1637.531058] ? do_mprotect_pkey+0x165/0x7e0 [ 1637.535392] ? apparmor_file_mprotect+0x101/0x140 [ 1637.540243] ? security_file_mprotect+0x83/0xb0 [ 1637.544921] do_mprotect_pkey+0x44a/0x7e0 [ 1637.549096] ? mprotect_fixup+0x8c0/0x8c0 [ 1637.553252] ? SyS_write+0x14d/0x210 [ 1637.556997] ? SyS_read+0x210/0x210 [ 1637.560634] SyS_pkey_mprotect+0x27/0x30 [ 1637.564797] ? SyS_mprotect+0x30/0x30 [ 1637.568603] do_syscall_64+0x1d5/0x640 [ 1637.572511] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1637.577732] RIP: 0033:0x45e219 [ 1637.580922] RSP: 002b:00007f31d7570c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1637.588691] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1637.596109] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1637.603394] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 03:00:26 executing program 4: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x16}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) [ 1637.610758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1637.618044] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c [ 1637.647754] FAULT_INJECTION: forcing a failure. [ 1637.647754] name failslab, interval 1, probability 0, space 0, times 0 03:00:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x4000000000000154}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10f640) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x300000f, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000080)=""/241) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x100000000) 03:00:26 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x7, 0x81, 0xb3, 0x8, 0x0, 0x80000003, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x41891, 0x3, 0x6, 0x5, 0xe38, 0x1ff, 0xfffa}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x3, 0xfe, 0x6, 0x6, 0x0, 0x8, 0x40800, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x0, 0x3}, 0x1010, 0x0, 0x0, 0x8, 0x1, 0x0, 0x200}, r1, 0x9, r0, 0x2) [ 1637.669768] CPU: 1 PID: 24096 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1637.677722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.687107] Call Trace: [ 1637.689724] dump_stack+0x1b2/0x281 [ 1637.693363] should_fail.cold+0x10a/0x149 [ 1637.697530] should_failslab+0xd6/0x130 [ 1637.701520] kmem_cache_alloc+0x28e/0x3c0 [ 1637.705676] __split_vma+0xc8/0x6c0 [ 1637.709309] split_vma+0x85/0xc0 [ 1637.712684] mprotect_fixup+0x671/0x8c0 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) getpid() pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) [ 1637.716668] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1637.721601] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1637.726623] ? change_protection+0xa0/0xa0 [ 1637.730863] ? lock_acquire+0x170/0x3f0 [ 1637.734860] ? do_mprotect_pkey+0x165/0x7e0 [ 1637.739190] ? apparmor_file_mprotect+0x101/0x140 [ 1637.744058] ? security_file_mprotect+0x83/0xb0 [ 1637.748771] do_mprotect_pkey+0x44a/0x7e0 [ 1637.753017] ? mprotect_fixup+0x8c0/0x8c0 [ 1637.757173] ? SyS_write+0x14d/0x210 [ 1637.760894] ? SyS_read+0x210/0x210 [ 1637.764551] SyS_pkey_mprotect+0x27/0x30 [ 1637.768643] ? SyS_mprotect+0x30/0x30 [ 1637.772451] do_syscall_64+0x1d5/0x640 [ 1637.776371] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1637.781577] RIP: 0033:0x45e219 [ 1637.784779] RSP: 002b:00007fe507ec6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1637.792501] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1637.799954] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1637.807229] RBP: 00007fe507ec6ca0 R08: 0000000000000000 R09: 0000000000000000 03:00:26 executing program 3 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000009, r0) 03:00:26 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8001) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x1, 0x8, 0x40, 0xffffffffffffffff}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map={0x18, 0x3, 0x1, 0x0, r0}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0xe, [], 0x0, 0x1, r0, 0x8, &(0x7f0000000100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x0, 0x400000, 0x80000001}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001080)='/dev/nvram\x00', 0x50000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x14, 0x9, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2be10c4c, 0x0, 0x0, 0x0, 0x200}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x0, 0x3, 0xb, 0xb, 0x5e450da39465b480}, @call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f00000010c0)='syzkaller\x00', 0x3f, 0xd7, &(0x7f00000011c0)=""/215, 0x41000, 0xe, [], 0x0, 0x10, r0, 0x8, &(0x7f00000012c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x1, 0x1ff, 0xffffffff}, 0x10, 0xffffffffffffffff, r1}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='freezer.state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000240)={0x0, 0x77, @start={0x0, 0x0, "cbe8f00e3b8e8162104d0d912088c39ce61cf0b1996a832fe21303aeb6afd3b0d0523dbe6d0cf7aba7982cf990da70ddcdfb9909a4e0444e958cff5c2ffa7f15f4844d4f62cb6c84ec9a403ada284f9d8f3c1930e945dc1ae0c8679565959efdc461eab60841f6a577f430e5385793c345fb96d36e428a9627d4224e045188f324fe868fb023c862473903a821bdd5883edbff69c3302ac50288fe8fe083e577e7cd811398df058db122c2058a98f3c85ba64d0672c532ef19ea4a5930dadd6a339197918e0941ad4c913e63000c0a3dacfe4021232718a66783d8faa97d2147884068c2d5d2700ec9a5fe544470a51d0af6b886adcbcddba4967c19ec42955ebfad0589e7f9613c75b237fd9e3ea243011c52ea21977a7998eead827af0a88bcda26553c3bf167186a123af1e787624f3ae0d367e6082ee5bd1a03773a1f61415580db5bd50034a0c200c1d3666da0a3d662fb8dd6a374dc932d46eddbfde5ac2bbe771a6bc2a9f1911e413e6380471744583cee2a4511f2b6e5eab5019159780f9a987ff5c8337ef9f93d160e693d2a35e7402968aa3ecb87aedaebc7a0bdf9eb5a55e21940fc33d6ec7d1208c8cb5f79ad72e9d2652c0f306471ca7cca657c59565957ef7c25d76b701b783f05da6f071729d92b875fabc8ade0c88b5e5bb6b77c5d47b60f3ec38dcd8e9e1b7637afd52b69a4d32e6c26a957f443efc6249eb1f94b08c23039676cda0f08639da59682812987bb007483471acf938e53f91b853b4ea047ac37bcd0599681917a0c1a679cfb2f4f9e2cf8dac71b839d6873e0f066a3a4f9ee7af7a5ab70fbf07ebd2ca1543b27ec5e1852520d8c8ae8c9ea6f32d746a465ecc489ad6c3f4f6a05bc476b26d81dc29ec0cb31cbf9bc2bae8d5c3b204f0dbda4ff9b75868ee85c1f6e39319024e6843ab18c4eefcc2cce0fb8856f1add6ce030e9087f9b4c8d70b179b1cb8e68ea3fdafef8ba4032c66bf8a5016e151df7093ccc9b523ec7f743b8fec535b69d4d7098dea32980506080ce381a5760022c15b1bbd33c033ffca5d3e24966ae18804a525f574366bb96cc72e4b477e664f7952bf97e52c9b09dc31c4beef38260776be121d80c126d1ca64a30debffbaa1a2bc5e53d973d5ac054223eb8ff875d7111d202afea60043e53a5e29010e3ba4846507ab758c01b528def49235c88c18051d798b45f673a4515466aa7fcf9f2babe00157375d1d770750d0a0c245189602c0d7653647593de49f2b2866dc063041f29b72aed7cbde1439dedc84d0e982515dc8abcb5890dc907cd50b3ca1cfc09e6c8eb739d00c3228a6ea39ee86a98a400550d8c25b679287b565da5604298c4bcd9dc8016fb8ea646a30ff9699b03483c2b2f73813cf3c988ad30fe5fce368315a407d89c56a66ec9cde87df197997ad6548d337206eef79d63ddcd9", "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"}, [0xffff, 0x1e, 0x5, 0x9, 0x7fffffff, 0x2, 0x7fffffff, 0xce38, 0x7, 0x6, 0x81, 0xffff, 0x3, 0x6, 0x6, 0x200, 0x6, 0xf1, 0xfffffffffffffe01, 0x4, 0x4b, 0xfff, 0x6, 0xc792, 0x7, 0x5, 0x6, 0x7fffffff, 0xfffffffffffff800, 0x4, 0x0, 0x2, 0x1ff, 0x6c, 0x80000, 0x3, 0x20, 0x81, 0xc4, 0x80000000, 0x1, 0x101, 0x8, 0xfff, 0x0, 0x3, 0x3f, 0x4, 0x8, 0x9, 0x1b8, 0x6, 0x9, 0xffffffffffffff00, 0x49e1, 0x0, 0x7, 0x40, 0x8e, 0x8, 0x9, 0x3b70, 0x8, 0x5]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000c80)={0x0, 0x7, {0x101, @struct={0x0, 0x9}, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x6, 0x8000, 0x8, @struct={0x5, 0x2}, 0xcf79, 0x5, [0x200, 0x5, 0x9, 0x80000000, 0x5, 0x1]}, {0xffffffff, @struct={0xb2bd, 0x6}, r6, 0x1, 0xa1, 0x100000000, 0x4, 0xaab, 0x2, @usage=0x1, 0x5, 0x96, [0x7fffffff, 0x7, 0x3ff, 0x2, 0xffffffff, 0xc1]}, {0x9b42, @usage=0x80000001, 0x0, 0x101, 0x4, 0x0, 0x6, 0xfff, 0xa0, @struct={0x5, 0x8000}, 0x4, 0x3, [0x100000000, 0x6, 0x8, 0x9, 0x7, 0x7]}, {0x2, 0x7, 0x401}}) 03:00:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) getuid() 03:00:26 executing program 2 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1637.814530] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1637.821800] R13: 00007ffc881e57af R14: 00007fe507ec79c0 R15: 000000000119bf8c 03:00:26 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x9) 03:00:26 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x2fb}, {0x3, [{@none, 0x35, 0x0, "669c95", 0x0, 0x88, "c43c00c50faf64ab4d90adf6c25fa50b766a6cfeb4896ef433d0bda3be038118f69ccaa0f61f650ba578db977fc63ab1c24288af8797ce672d4dd8be0faea059fe497b33fe69b908083f827c8b5ae87d92e1b4407c4f0bbe9fdbc73c04d31583f08f04e2ebd6de2b715aa9d5e8b0259e7b29a7cc2edcfbc2c8840db58b7136ec1940b9e411bbfe419bd1c1c3772dbcc35f9d6f536b333a1a2c0b49213adb8eaecd180b7fb2030247401c82836f88a6e40b15e3e296e2f69fa4b9f4a58ab1a98f2df30aa6491fcffda3bd264fd7516c9deeb2146ba6e11f27992c6625eb5dcff46e3065ae879dc91bd38c9cfc91f3cebe"}, {@none, 0x9, 0x2, "f1406c", 0x7, 0x3, "741f778e1e83fb7bba2c4fe43f13c0d80b34367a31cab23aeadc5c847afd060af57b554c28d13920796dbf0d6e965d08ecce5b1b0c637598000103a7ae81d843aca4f8414d6776dc02069fb5ef20b466002a0b19a4913c7fef2d430c8d640d218a2873cc752c24e8a4e5e02f4308007a61a885af53400fccd2f017bfadf8b23a8de8fa8b36fc78337f7110e640f4e5eee277f699fcfc336c6fa21a60b732636599aa75bfb4ddbab5416c01e3602afcbda9bcc838bc05b195cf0c2520d477023e3ca32341a8a274f206eeca59c2f9e355069a144493fdef5f82e199cd838f7d84769c33505ffc002b6c2288a3ce98c89f"}, {@fixed={[], 0x12}, 0x1, 0x0, "8517b0", 0x1000, 0x81, "aac39aa073faf98b12a82ee78dff88ba7f6be8eb74b119dfc1f02e777f5d94d04a9bcc9e921eab5b536af0907c0628775185e9e3e1e0e9bb7069fd0589683bebb26b4b027fcdaa2960d0178f0ffe3b34789b37405d22b0df8da98bc311f7c5dfc34becd4bbe397fa28e2377196c8be546abe7fedfad0704a3b89548a8078ac31e92a19ee7f7762793c5f742cdeb174e9beadd80092f9a06a6dbff9af44e29da0184a2c54bad4d1a65ae266b3e5ac7ec3ab08e8e95885b7caaed9105be95c5803c2ec0cf493bba6cc3456d8a3306c43cab51cb4f98ed89ebe512be21e780780dd7024cfe3ea1b4c0fca53f4125a69c399"}]}}}, 0x2fe) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000440)={'netpci0\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x8010) [ 1637.890017] FAULT_INJECTION: forcing a failure. [ 1637.890017] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.915537] FAULT_INJECTION: forcing a failure. [ 1637.915537] name failslab, interval 1, probability 0, space 0, times 0 03:00:26 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1637.937676] CPU: 1 PID: 24120 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1637.945598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1637.954961] Call Trace: [ 1637.957557] dump_stack+0x1b2/0x281 [ 1637.961195] should_fail.cold+0x10a/0x149 [ 1637.965353] should_failslab+0xd6/0x130 [ 1637.969428] kmem_cache_alloc+0x40/0x3c0 [ 1637.973504] anon_vma_clone+0xe0/0x5b0 [ 1637.977409] __split_vma+0x282/0x6c0 [ 1637.981145] split_vma+0x85/0xc0 [ 1637.984520] mprotect_fixup+0x671/0x8c0 03:00:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r2, 0x8, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4074844}, 0x40044) 03:00:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000001440)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001480)={'ip6_vti0\x00', r1, 0x2f, 0x3f, 0x3, 0x5, 0x64, @ipv4={[], [], @multicast1}, @loopback, 0x8000, 0x8000, 0x800, 0x3}}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000001580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f00000012c0)={0x4c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000002c0)={{r0}, r3, 0x1c, @inherit={0x50, &(0x7f0000000040)={0x1, 0x1, 0x8, 0x69, {0x11, 0x7, 0x0, 0x6, 0x21}, [0x3f]}}, @subvolid=0x9}) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x149}, "ea4e86c9ea33ccda20e5e9e29c9d18f3ae10584887bc7810aeabd390afa003c9e8586a0dc645370338284d93d7b83bd471d2d08e07942b13540933ff8780010522683b96aa5ec258d9df5fda01e14249e81890fd16344667172c35dad15dfc3270339ed1b98232c3cfee9ae76bc9c057116c01c53e4715427cd6bb005c7ab3d19e1a39a2e6788c85550305695ea0a12ccb3a3c0db483c8dd3a3525d42c868381488e34543535792b0935a6c2b27f6eda6bb5e09b9213a0c439100cd31cdbca14a82d00da829d1dc29ddbe5e416d4e65df472493310e0c0d92d49ecde5385fadfa8c409d7030ffac4ef39d0bf5b51727ce88e487b000000006370a2909042f53fffbbaacc2bd5371e59bce4ec878ec28fe1ca04688479e88ae66047d81d635251bb9103bace6a6f4ba1dd1f22d045d36aa10fa61b4541f54ee1aff9ee7f408260233c482d1e1ca19a07"}, 0x14d) [ 1637.988503] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1637.993441] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1637.998477] ? change_protection+0xa0/0xa0 [ 1638.002741] ? lock_acquire+0x170/0x3f0 [ 1638.006744] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.011073] ? apparmor_file_mprotect+0x101/0x140 [ 1638.015928] ? security_file_mprotect+0x83/0xb0 [ 1638.020604] do_mprotect_pkey+0x44a/0x7e0 [ 1638.024941] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.029120] ? SyS_write+0x14d/0x210 [ 1638.032852] ? SyS_read+0x210/0x210 [ 1638.036486] SyS_pkey_mprotect+0x27/0x30 [ 1638.040548] ? SyS_mprotect+0x30/0x30 [ 1638.044364] do_syscall_64+0x1d5/0x640 [ 1638.048265] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.053467] RIP: 0033:0x45e219 [ 1638.056658] RSP: 002b:00007fe507ec6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1638.064373] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1638.071649] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1638.078927] RBP: 00007fe507ec6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.086260] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1638.093540] R13: 00007ffc881e57af R14: 00007fe507ec79c0 R15: 000000000119bf8c [ 1638.105034] CPU: 0 PID: 24123 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1638.112964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.122360] Call Trace: [ 1638.124941] dump_stack+0x1b2/0x281 [ 1638.128561] should_fail.cold+0x10a/0x149 [ 1638.132704] should_failslab+0xd6/0x130 [ 1638.136664] kmem_cache_alloc+0x40/0x3c0 [ 1638.140713] anon_vma_clone+0xe0/0x5b0 [ 1638.144614] __split_vma+0x282/0x6c0 [ 1638.148316] split_vma+0x85/0xc0 [ 1638.151665] mprotect_fixup+0x671/0x8c0 [ 1638.155639] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1638.160555] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1638.165556] ? change_protection+0xa0/0xa0 [ 1638.169777] ? lock_acquire+0x170/0x3f0 [ 1638.173734] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.178042] ? apparmor_file_mprotect+0x101/0x140 [ 1638.182896] ? security_file_mprotect+0x83/0xb0 [ 1638.187558] do_mprotect_pkey+0x44a/0x7e0 [ 1638.191712] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.195867] ? SyS_write+0x14d/0x210 [ 1638.199599] ? SyS_read+0x210/0x210 [ 1638.203213] SyS_pkey_mprotect+0x27/0x30 [ 1638.207255] ? SyS_mprotect+0x30/0x30 [ 1638.211038] do_syscall_64+0x1d5/0x640 [ 1638.214912] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.220080] RIP: 0033:0x45e219 [ 1638.223250] RSP: 002b:00007f31d7570c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1638.230979] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 03:00:26 executing program 3 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 1 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r2 = accept$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) getsockname$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) [ 1638.238247] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1638.245501] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.252773] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1638.260028] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c 03:00:26 executing program 5: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x11, 0xffffffffffffffff, 0x1000000003) 03:00:26 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x8, 0x7, 0x78, 0xe68, 0x1, 0x9, 0x1ff, 0xfffffffb}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:00:26 executing program 2 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) [ 1638.325341] FAULT_INJECTION: forcing a failure. [ 1638.325341] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.346097] CPU: 1 PID: 24145 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1638.353719] FAULT_INJECTION: forcing a failure. [ 1638.353719] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.354019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.374558] Call Trace: [ 1638.377150] dump_stack+0x1b2/0x281 [ 1638.380779] should_fail.cold+0x10a/0x149 [ 1638.384941] should_failslab+0xd6/0x130 [ 1638.388934] kmem_cache_alloc+0x28e/0x3c0 [ 1638.393124] __split_vma+0xc8/0x6c0 [ 1638.396754] split_vma+0x85/0xc0 [ 1638.400121] mprotect_fixup+0x6e3/0x8c0 [ 1638.404097] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1638.409028] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1638.414047] ? change_protection+0xa0/0xa0 [ 1638.418302] ? lock_acquire+0x170/0x3f0 [ 1638.422281] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.426607] ? apparmor_file_mprotect+0x101/0x140 [ 1638.431452] ? security_file_mprotect+0x83/0xb0 [ 1638.436174] do_mprotect_pkey+0x44a/0x7e0 [ 1638.440333] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.444479] ? SyS_write+0x14d/0x210 [ 1638.448205] ? SyS_read+0x210/0x210 [ 1638.451831] SyS_pkey_mprotect+0x27/0x30 [ 1638.455913] ? SyS_mprotect+0x30/0x30 [ 1638.459712] do_syscall_64+0x1d5/0x640 [ 1638.463601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.468880] RIP: 0033:0x45e219 [ 1638.472064] RSP: 002b:00007f31d7570c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1638.479768] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1638.487038] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1638.494398] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.494500] FAULT_INJECTION: forcing a failure. [ 1638.494500] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.501677] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 03:00:26 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x330d, 0x4000) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x204, 0x99, 0x6, 0x9, 0x9, @local}, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 03:00:26 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001140)={{r2}, 0x0, 0x18, @inherit={0x90, &(0x7f00000000c0)={0x0, 0x9, 0x1, 0x0, {0x20, 0x3, 0x4, 0x400, 0x1}, [0x80, 0x9, 0xfffffffffffffffc, 0x9, 0x81, 0xfffffffffffffeff, 0x10001, 0x2, 0x9]}}, @subvolid}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) [ 1638.501684] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c [ 1638.542022] CPU: 0 PID: 24146 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1638.549971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.559357] Call Trace: [ 1638.561956] dump_stack+0x1b2/0x281 [ 1638.565690] should_fail.cold+0x10a/0x149 [ 1638.569879] should_failslab+0xd6/0x130 [ 1638.573889] kmem_cache_alloc+0x28e/0x3c0 [ 1638.578050] __split_vma+0xc8/0x6c0 [ 1638.581700] split_vma+0x85/0xc0 [ 1638.585071] mprotect_fixup+0x671/0x8c0 [ 1638.589053] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1638.594202] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1638.599280] ? change_protection+0xa0/0xa0 [ 1638.603533] ? lock_acquire+0x170/0x3f0 [ 1638.607509] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.611845] ? apparmor_file_mprotect+0x101/0x140 [ 1638.616726] ? security_file_mprotect+0x83/0xb0 [ 1638.621413] do_mprotect_pkey+0x44a/0x7e0 [ 1638.625600] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.629841] ? SyS_write+0x14d/0x210 [ 1638.633651] ? SyS_read+0x210/0x210 [ 1638.637551] SyS_pkey_mprotect+0x27/0x30 [ 1638.641697] ? SyS_mprotect+0x30/0x30 [ 1638.645604] do_syscall_64+0x1d5/0x640 [ 1638.649531] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.654751] RIP: 0033:0x45e219 [ 1638.657944] RSP: 002b:00007f66afcacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1638.665659] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 03:00:27 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) 03:00:27 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000881) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10008800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={0x1, &(0x7f0000000500), &(0x7f0000000540)=""/212}, 0x20) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000001, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xe55, 0x26a1c5de}) syz_extract_tcp_res(&(0x7f00000003c0), 0x2, 0x1f) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040050}, 0x800) 03:00:27 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x100010, 0xffffffffffffffff, 0x0) 03:00:27 executing program 3 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1638.673032] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1638.680402] RBP: 00007f66afcacca0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.688593] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1638.695573] FAULT_INJECTION: forcing a failure. [ 1638.695573] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.696061] R13: 00007fff7317efbf R14: 00007f66afcad9c0 R15: 000000000119bf8c [ 1638.734477] CPU: 0 PID: 24156 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1638.742412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.751781] Call Trace: [ 1638.754384] dump_stack+0x1b2/0x281 [ 1638.758064] should_fail.cold+0x10a/0x149 [ 1638.762213] should_failslab+0xd6/0x130 [ 1638.766271] kmem_cache_alloc+0x28e/0x3c0 [ 1638.770436] __split_vma+0xc8/0x6c0 [ 1638.774057] split_vma+0x85/0xc0 [ 1638.777418] mprotect_fixup+0x6e3/0x8c0 [ 1638.781406] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1638.786330] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1638.791349] ? change_protection+0xa0/0xa0 [ 1638.795596] ? lock_acquire+0x170/0x3f0 [ 1638.799682] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.804273] ? apparmor_file_mprotect+0x101/0x140 [ 1638.809119] ? security_file_mprotect+0x83/0xb0 [ 1638.813891] do_mprotect_pkey+0x44a/0x7e0 [ 1638.818048] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.822195] ? SyS_write+0x14d/0x210 [ 1638.825929] ? SyS_read+0x210/0x210 [ 1638.829557] SyS_pkey_mprotect+0x27/0x30 [ 1638.833614] ? SyS_mprotect+0x30/0x30 [ 1638.837416] do_syscall_64+0x1d5/0x640 [ 1638.841306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.846489] RIP: 0033:0x45e219 [ 1638.849705] RSP: 002b:00007fe507ec6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1638.857412] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1638.864692] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1638.871994] RBP: 00007fe507ec6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.879259] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1638.887414] R13: 00007ffc881e57af R14: 00007fe507ec79c0 R15: 000000000119bf8c [ 1638.894720] CPU: 1 PID: 24171 Comm: syz-executor.3 Not tainted 4.14.217-syzkaller #0 [ 1638.902738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1638.912096] Call Trace: [ 1638.914682] dump_stack+0x1b2/0x281 [ 1638.918311] should_fail.cold+0x10a/0x149 [ 1638.922464] should_failslab+0xd6/0x130 [ 1638.926467] kmem_cache_alloc+0x40/0x3c0 [ 1638.930535] anon_vma_clone+0xe0/0x5b0 03:00:27 executing program 1 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x22000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:27 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400081, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 03:00:27 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x80, 0xc9, @fixed={[], 0x11}, 0x0, 0xc1, 0x0, 0x20, 0xb19, 0x3e}}}, 0x14) 03:00:27 executing program 2 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1638.934428] __split_vma+0x282/0x6c0 [ 1638.938148] split_vma+0x85/0xc0 [ 1638.941515] mprotect_fixup+0x6e3/0x8c0 [ 1638.945489] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1638.950421] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1638.955442] ? change_protection+0xa0/0xa0 [ 1638.959686] ? lock_acquire+0x170/0x3f0 [ 1638.963660] ? do_mprotect_pkey+0x165/0x7e0 [ 1638.965385] FAULT_INJECTION: forcing a failure. [ 1638.965385] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.967995] ? apparmor_file_mprotect+0x101/0x140 [ 1638.968009] ? security_file_mprotect+0x83/0xb0 [ 1638.968020] do_mprotect_pkey+0x44a/0x7e0 [ 1638.968034] ? mprotect_fixup+0x8c0/0x8c0 [ 1638.968042] ? SyS_write+0x14d/0x210 [ 1638.968052] ? SyS_read+0x210/0x210 [ 1638.968063] SyS_pkey_mprotect+0x27/0x30 [ 1638.968071] ? SyS_mprotect+0x30/0x30 [ 1638.968090] do_syscall_64+0x1d5/0x640 [ 1638.968107] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1638.968123] RIP: 0033:0x45e219 [ 1639.024675] RSP: 002b:00007f31d7570c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1639.032403] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1639.039671] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1639.046962] RBP: 00007f31d7570ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.050110] FAULT_INJECTION: forcing a failure. [ 1639.050110] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.054232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 1639.054238] R13: 00007fff7611ca1f R14: 00007f31d75719c0 R15: 000000000119bf8c [ 1639.083793] CPU: 0 PID: 24176 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1639.091788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.101164] Call Trace: [ 1639.103760] dump_stack+0x1b2/0x281 [ 1639.107403] should_fail.cold+0x10a/0x149 [ 1639.111561] should_failslab+0xd6/0x130 [ 1639.115548] kmem_cache_alloc+0x40/0x3c0 [ 1639.119682] anon_vma_clone+0xe0/0x5b0 [ 1639.123590] __split_vma+0x282/0x6c0 [ 1639.127338] split_vma+0x85/0xc0 [ 1639.130797] mprotect_fixup+0x671/0x8c0 [ 1639.134783] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1639.139717] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1639.144742] ? change_protection+0xa0/0xa0 [ 1639.148982] ? lock_acquire+0x170/0x3f0 [ 1639.152955] ? do_mprotect_pkey+0x165/0x7e0 [ 1639.157299] ? apparmor_file_mprotect+0x101/0x140 [ 1639.162148] ? security_file_mprotect+0x83/0xb0 [ 1639.166845] do_mprotect_pkey+0x44a/0x7e0 [ 1639.171030] ? mprotect_fixup+0x8c0/0x8c0 [ 1639.175181] ? SyS_write+0x14d/0x210 [ 1639.178901] ? SyS_read+0x210/0x210 [ 1639.182540] SyS_pkey_mprotect+0x27/0x30 03:00:27 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_disconn_rsp={{0x7, 0xfc, 0x4}, {0x80, 0x1f}}, @l2cap_cmd_rej_unk={{0x1, 0x26, 0x2}, {0x5}}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x8}}]}}, 0x1d) 03:00:27 executing program 3 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:27 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x640000, 0x0) 03:00:27 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) 03:00:27 executing program 4: socketpair(0x1f, 0x4, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x310, 0x5, 0xff, 0x8, 0x7, @random="9aedd823ee72"}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9105a0056000100113f020002000c040500070003000203af08000500d408ff0f200010020400020000f00300080069430700ff010080110502000010068104009eddd35f5c00d9f98fde0100020002090400042d00010c0f0500000008009d0202040000000900"], 0x5f) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0x1, 0x2, @loopback, @mcast1, 0x7800, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r2, 0x2f, 0x0, 0x8, 0x101, 0x60, @mcast2, @mcast1, 0x1, 0x0, 0x2, 0x9}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="7cd21d9aa7b08a69863c81390a5fb7b6015d8b9f4895793d24e93c631501dc553d48090b177e0f3cbec2edc3717c5aa89f583d303ecfb99747f0d2ba884a0eb14a3ad9b18c7ad04a6f216b51080d0000000000000000323c3d6593d1c463a4692b6ca71a5a95c0cd277db696570dd4339127c28ad9fd47a6f2889e644a48b97ea798ba1c51b208da3e35093328d68631baf4bc4af39c7a2cdb105621a9e78a642366f257f6d52096fa258ac8e773049c4d506d0e2ba6b6367d138273f2193c"], 0x4) 03:00:27 executing program 3: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, r0) [ 1639.186628] ? SyS_mprotect+0x30/0x30 [ 1639.190434] do_syscall_64+0x1d5/0x640 [ 1639.194335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1639.199528] RIP: 0033:0x45e219 [ 1639.202715] RSP: 002b:00007f66afcacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1639.203267] Bluetooth: Unexpected continuation frame (len 90) [ 1639.210422] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1639.210428] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 03:00:27 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1639.210433] RBP: 00007f66afcacca0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.210439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1639.210445] R13: 00007fff7317efbf R14: 00007f66afcad9c0 R15: 000000000119bf8c [ 1639.258716] Bluetooth: Unexpected continuation frame (len 90) [ 1639.298496] CPU: 0 PID: 24177 Comm: syz-executor.2 Not tainted 4.14.217-syzkaller #0 [ 1639.306439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.315835] Call Trace: [ 1639.318435] dump_stack+0x1b2/0x281 [ 1639.322075] should_fail.cold+0x10a/0x149 [ 1639.326237] should_failslab+0xd6/0x130 [ 1639.330238] kmem_cache_alloc+0x40/0x3c0 [ 1639.334550] anon_vma_clone+0xe0/0x5b0 [ 1639.338461] __split_vma+0x282/0x6c0 [ 1639.342192] split_vma+0x85/0xc0 03:00:27 executing program 1 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:27 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x8003, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x40003) 03:00:27 executing program 4: syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0x8, 0x18}, {0x1, 0x80, [0x9, 0x6, 0x55d3, 0x1, 0x6, 0x3f, 0x0, 0x1400, 0x0, 0xff78]}}}}, 0x25) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r2 = accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) getsockname$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e) 03:00:27 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x60000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x7, 0x2}, 0xc00, 0x4, 0x10001, 0x1, 0x2ce0, 0x8, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9fb8627d1f2b7d68) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) [ 1639.345567] mprotect_fixup+0x6e3/0x8c0 [ 1639.349550] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1639.354494] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1639.359524] ? change_protection+0xa0/0xa0 [ 1639.363794] ? lock_acquire+0x170/0x3f0 [ 1639.368304] ? do_mprotect_pkey+0x165/0x7e0 [ 1639.372645] ? apparmor_file_mprotect+0x101/0x140 [ 1639.377511] ? security_file_mprotect+0x83/0xb0 [ 1639.382203] do_mprotect_pkey+0x44a/0x7e0 [ 1639.386407] ? mprotect_fixup+0x8c0/0x8c0 [ 1639.390584] ? SyS_write+0x14d/0x210 [ 1639.391282] FAULT_INJECTION: forcing a failure. [ 1639.391282] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.394313] ? SyS_read+0x210/0x210 [ 1639.394327] SyS_pkey_mprotect+0x27/0x30 [ 1639.394338] ? SyS_mprotect+0x30/0x30 [ 1639.394350] do_syscall_64+0x1d5/0x640 [ 1639.394368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1639.394383] RIP: 0033:0x45e219 [ 1639.429707] RSP: 002b:00007fe507ec6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1639.437423] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1639.444706] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1639.452000] RBP: 00007fe507ec6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.459282] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 1639.466661] R13: 00007ffc881e57af R14: 00007fe507ec79c0 R15: 000000000119bf8c [ 1639.473953] CPU: 1 PID: 24210 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1639.481858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.491223] Call Trace: [ 1639.493824] dump_stack+0x1b2/0x281 [ 1639.497465] should_fail.cold+0x10a/0x149 [ 1639.501627] should_failslab+0xd6/0x130 [ 1639.505637] kmem_cache_alloc+0x28e/0x3c0 [ 1639.509799] __split_vma+0xc8/0x6c0 [ 1639.513448] split_vma+0x85/0xc0 [ 1639.516825] mprotect_fixup+0x6e3/0x8c0 [ 1639.520818] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1639.525755] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1639.530814] ? change_protection+0xa0/0xa0 [ 1639.535091] ? lock_acquire+0x170/0x3f0 [ 1639.539067] ? do_mprotect_pkey+0x165/0x7e0 [ 1639.543574] ? apparmor_file_mprotect+0x101/0x140 [ 1639.548425] ? security_file_mprotect+0x83/0xb0 [ 1639.553126] do_mprotect_pkey+0x44a/0x7e0 [ 1639.557281] ? mprotect_fixup+0x8c0/0x8c0 [ 1639.561425] ? SyS_write+0x14d/0x210 [ 1639.565220] ? SyS_read+0x210/0x210 [ 1639.569141] SyS_pkey_mprotect+0x27/0x30 [ 1639.573328] ? SyS_mprotect+0x30/0x30 [ 1639.577137] do_syscall_64+0x1d5/0x640 [ 1639.581059] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1639.586252] RIP: 0033:0x45e219 [ 1639.589673] RSP: 002b:00007f66afcacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 03:00:28 executing program 2 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x1, 0x80001) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x4000010, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6, 0x20, 0x3f, 0x80, 0x0, 0x1f, 0x103, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x101}, 0x8000, 0x4, 0x2, 0x4, 0x3, 0xffffff7f, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x90}, "0b63a957bb6a9d99abe7c13021775d4c27eba752200302bdde54a675de07af4b960bcec4ffee02637c64255ce3e810b860a2875fe70741b7d8a347654cddd4ce515a353bfd670c5a786be11ec6c6f4c7d1c58b19a0a6885e2d475cb384e975c82eb95015b1df9e9982ce85f924f9dfe468d171940e0f1dc890cd212b6a3e3c79e334306a72f805baebb120fa5d11b5e3"}, 0x94) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x400}}}, 0xd) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000100)={0x3, 0x6, 0x8001, 0x9, 0x8, 0xffffffff}) 03:00:28 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0xfffffffa, 0xfffffffb, 0x8001, 0x7, 0x8e, 0x200, 0x10001, 0x9, 0x3ff, 0x5, 0x8}) [ 1639.597397] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1639.604713] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1639.612184] RBP: 00007f66afcacca0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.619451] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1639.626722] R13: 00007fff7317efbf R14: 00007f66afcad9c0 R15: 000000000119bf8c 03:00:28 executing program 1 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x3c, 0x4}, {0x1, 0x80}}}}, 0x11) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='/dev/dri/card#\x00') 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) [ 1639.733090] FAULT_INJECTION: forcing a failure. [ 1639.733090] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.755291] Bluetooth: Unexpected continuation frame (len 12) [ 1639.761490] Bluetooth: Unexpected continuation frame (len 12) [ 1639.763337] CPU: 1 PID: 24232 Comm: syz-executor.1 Not tainted 4.14.217-syzkaller #0 [ 1639.775284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1639.784650] Call Trace: [ 1639.787257] dump_stack+0x1b2/0x281 [ 1639.790902] should_fail.cold+0x10a/0x149 [ 1639.795069] should_failslab+0xd6/0x130 [ 1639.799056] kmem_cache_alloc+0x40/0x3c0 [ 1639.803131] anon_vma_clone+0xe0/0x5b0 [ 1639.807043] __split_vma+0x282/0x6c0 [ 1639.810769] split_vma+0x85/0xc0 [ 1639.814148] mprotect_fixup+0x6e3/0x8c0 [ 1639.818134] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1639.823075] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1639.828116] ? change_protection+0xa0/0xa0 03:00:28 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000007, 0xffffffffffffffff) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1}, @l2cap_cid_signaling={{}, [@l2cap_move_chan_cfm_rsp={{}, {0x1}}]}}, 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xc8}}, 0x4) 03:00:28 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x10100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000003c0)={0x0, 0x5, @start={0x0, 0x0, "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", "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"}, [0xfa, 0x8, 0xff, 0x800, 0x8001, 0xff, 0xaf92, 0x4, 0x7ff, 0x6, 0x4, 0x8000, 0x5, 0x800, 0x7, 0x4, 0x7, 0x401, 0xfff, 0x0, 0x6, 0x945, 0x100000001, 0x5, 0xc7, 0x4, 0x2, 0x80000001, 0x6, 0xfffffffffffff800, 0x4, 0x80000000, 0x1, 0x100, 0x7fff, 0x97, 0xcbd, 0x4, 0x8, 0x2, 0xfff, 0x56d2c52d, 0x1ff, 0x80000000, 0x1000, 0x9, 0x5, 0x20, 0xd3, 0xdb, 0x4, 0x10000, 0xffffffffffffa444, 0xc569, 0x6, 0x7, 0x8000, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x2, 0x4, 0xffffffffffffffc9, 0x9]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r2, 0xf8, 0xfffffffd, 0xffffffa7, 0x9, 0x2, 0x6, 0x8, 0x9, 0x2, 0x9, 0x7ff}) [ 1639.832394] ? lock_acquire+0x170/0x3f0 [ 1639.836376] ? do_mprotect_pkey+0x165/0x7e0 [ 1639.840706] ? apparmor_file_mprotect+0x101/0x140 [ 1639.845573] ? security_file_mprotect+0x83/0xb0 [ 1639.850283] do_mprotect_pkey+0x44a/0x7e0 [ 1639.854443] ? mprotect_fixup+0x8c0/0x8c0 [ 1639.858627] ? SyS_write+0x14d/0x210 [ 1639.862351] ? SyS_read+0x210/0x210 [ 1639.866000] SyS_pkey_mprotect+0x27/0x30 [ 1639.870067] ? SyS_mprotect+0x30/0x30 [ 1639.873874] do_syscall_64+0x1d5/0x640 [ 1639.877783] entry_SYSCALL_64_after_hwframe+0x46/0xbb 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x5, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x519, 0x12bc0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) 03:00:28 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x3ffffff, 0xffffffffffffffff, 0xfffffffffffffffe) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) [ 1639.882979] RIP: 0033:0x45e219 [ 1639.886178] RSP: 002b:00007f66afcacc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000149 [ 1639.893897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1639.901190] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020003000 [ 1639.908467] RBP: 00007f66afcacca0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.915748] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000003 [ 1639.923054] R13: 00007fff7317efbf R14: 00007f66afcad9c0 R15: 000000000119bf8c 03:00:28 executing program 1 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x0, 0x3, 0xc747, 0x6, 0x0, 0x6c, 0x9, 0x7}, 0x0) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x20, 0x4, 0x70, @private1, @loopback, 0x8000, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'sit0\x00', r2, 0x2f, 0x9, 0x40, 0x9, 0x38, @private0, @private1={0xfc, 0x1, [], 0x1}, 0x700, 0x40, 0x3d2, 0x6}}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x33c, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1ad1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x72e0}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0xdbee, 0x0, 0x5a, 0x4}]}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1c}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xb6c}}, {0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20008041}, 0xe33fc1d38b96e5ee) 03:00:28 executing program 0: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000003c0)={0x6, 0x7, {0x1, @usage=0x4, 0x0, 0x7, 0x80, 0x3, 0x1f, 0xb34f, 0xa, @usage=0x8819, 0x9, 0x9, [0x8, 0x40, 0x4, 0x2, 0x100000001, 0xf6]}, {0x9cb, @usage=0xffffffff, 0x0, 0x200, 0x0, 0x7, 0x0, 0xff, 0x22, @usage=0x6, 0x8, 0x6, [0x3, 0x1, 0x7, 0x1, 0x5da2]}, {0x81, @struct={0x366011d7, 0x2d6c}, 0x0, 0x9, 0x9, 0x3, 0x7c16, 0x200000000, 0x0, @usage, 0x7, 0x2, [0x8, 0xe2, 0x6, 0x5, 0x200, 0x101]}, {0x1, 0xfff, 0x6}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000007c0)={0x9, 0x2, {0x2, @struct={0x4, 0x3}, 0x0, 0x4, 0x101, 0xfff, 0xfffffffffffff000, 0xfffffffffffff24c, 0x4, @struct={0x4, 0x4}, 0x2, 0x1, [0x0, 0x78a4, 0xffffffffffffffff, 0x58b, 0x401]}, {0x8001, @usage=0x1f, 0x0, 0x5, 0x2, 0x100000000, 0x9, 0x80000000, 0x0, @struct={0xfd0, 0x1}, 0x3, 0x6, [0xffffffffffffff00, 0x8, 0x800, 0x0, 0x7, 0x81]}, {0x5, @struct={0x20, 0x3}, r0, 0x6, 0xba, 0x5, 0x3f3, 0xff, 0x400, @usage=0x256d, 0x7, 0xffff, [0x1, 0xde, 0x4, 0x100000001, 0x6000000000000, 0x1007]}, {0x7fffffff, 0x1, 0x7}}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000080)=0xc1, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r1) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:00:28 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x400c080}, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/13) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:28 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) socket(0x2e, 0x4, 0x455) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') 03:00:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x20402, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 03:00:28 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) 03:00:28 executing program 5: ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/220) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x8, 0x400, 0x2, @loopback, @private0, 0x7800, 0x8, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept$unix(r4, &(0x7f0000000400), &(0x7f0000000480)=0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x1, 0x9, 0x22, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, 0x40, 0x7800, 0x1, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000640)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000006c0)=0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="b4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001f00000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d4da000008000100", @ANYRES32=0x0, @ANYBLOB="340202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040092000202040000000400038185020000ff00b509000000805f50ff08080000000001ff04ff030000010003d50800000001000200ffffffff0800140203000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004003119000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="d80102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400080081d7008000000001fb02000400004100710669060000440006020500000009007f77018000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r9, @ANYBLOB="b800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40010024000176f33bd1ecee7cc76400000000000008000000000000000000080000000600000000033f00000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010100003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000008000100", @ANYRES32=r12, @ANYRESHEX=r12, @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000800000"], 0x824}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000040) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) getpeername(r4, &(0x7f0000000fc0)=@sco={0x1f, @fixed}, &(0x7f0000000f00)=0x80) 03:00:28 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xb321, 0x20200) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0xffffffffffffffff) 03:00:28 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20188004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) getegid() syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9001280e51252008000000000080080090006000600"], 0x17) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x7}, 0x8) 03:00:28 executing program 0: r0 = gettid() getpid() getpid() r1 = getpid() capset(&(0x7f0000000180)={0x20071026, r1}, &(0x7f00000001c0)={0x5, 0x4, 0x0, 0x6, 0x2, 0x6}) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioprio_get$pid(0x3, r0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400000000100, 0x640c1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth1_to_hsr\x00', @multicast}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x15}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000000c0)=r5) 03:00:28 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x240000) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 5: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x7fffffff) 03:00:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"ac1315bda697d1f25e1ef25fbf214e52", 0x0, 0x0, {0x8, 0xe9}, {0x3f, 0xff}, 0x80, [0x5, 0x5, 0x5, 0x8, 0x3, 0x8, 0xf08ce14, 0x6, 0x9, 0x4bc, 0x10001, 0xffffffffffffffff, 0xf054, 0x5, 0x0, 0x100000001]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000003c0)={{r0}, r1, 0x6, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3ff, 0x4, {0x10, 0x1, 0x9a, 0xe5d, 0x6}, [0x1, 0x6, 0x8ffd, 0x0]}}, @name="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"}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) [ 1640.223667] Bluetooth: Unexpected start frame (len 18) 03:00:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x80080) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x50bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc080) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)=0x1) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:28 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050425010002"], 0x7) 03:00:28 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, r0) socket$inet_icmp(0x2, 0x2, 0x1) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="67d9eed94075b3c05dfe51ffafc88a682ed9a72937c08bbb5da15d949ae9f890e058a00ef6483e3ea3891cae9fab7ea211b0a06411c5514304494fb5c3b584871830bc52ee9fe71381c4a7f1eba7afab7d8b73ef530657583f3b98be860d57da058b37ba7cfeaf54c0b03b60c29a7ce33d653ba7d3541d5b121ee1eb98b7fc42e10790198bb135b650022da8fad948d7eca1600e0cac6c250e25146ef8456c8984d7e340c9b6543f69448e2cff91162608f289efc5b4db18ddd9a5ac69689049c254c57a3ba530146f69571a1917815d2501a9bd5299dd4a4940de0a39c02e5e6aa96a5f1fd0", 0xe6) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0xae, 0xc8, 0x3f}}}, 0x0) 03:00:28 executing program 5: connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x101, 0x4, 0x0, 0x1, 0x0, @dev={[], 0x40}}, 0x10) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:28 executing program 1: pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 03:00:28 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000001, 0x100) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000003, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xf9, 0x248181) 03:00:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x100) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000040)="53fb3618b7512241e2ffcfddd8c5aab1ce8f18999379dfe9dc2c030a641cd63d86d8db9c28d74b61cd453119186ac82f516d59d5d09280527c159127967e4d9e8b76ea1d7c6a5b7a5914800a22a9e52dd25ef1e8fd9ad727bf3aa6ed316f729e4337d6dd5693c931819e97e041624ae22b59a90c", 0x74) r1 = socket(0x10, 0x6, 0x400000) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:28 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x81, 0x2bbd, 0x4, @private2, @private0={0xfc, 0x0, [], 0x1}, 0x1, 0x700, 0x6, 0x4b43}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000016c0)={'ip6_vti0\x00', &(0x7f0000001640)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x1, 0x8000, 0xa5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x8000, 0xf819, 0x6, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001880)={'ip6gre0\x00', &(0x7f0000001800)={'syztnl0\x00', 0x0, 0x29, 0xea, 0x40, 0x8, 0x22, @mcast2, @remote, 0x1, 0x8, 0xfffffffe, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000024c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f00000019c0)={0xa90, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x0, 0x20, 0x2, 0x1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xa6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x1}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xa489}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x0, 0x1, 'notify_peers_interval\x00'}, {}, {0x0, 0x4, 0x138}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x234}}]}, 0xa90}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0c4) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x800, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x4}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 03:00:28 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x4, 0x402000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xdc}, @l2cap_cid_signaling={{0xd8}, [@l2cap_info_rsp={{0xb, 0x10, 0xd4}, {0xb048, 0x626, "8f4dda6b29eb6060c73e99e09560df6f047ffef24f380dd62cab1a845447fc4bb78faf81573a539c172325d19e23b08db71d1b017daf78f1cb1a3c2bea0e69482b3a8db450fd5fabcfae844dc43dbdf25a3fe8d029b37095f9a753ff7fa66803ba8fda6c6a0c7ee079b0cc9cb477f0a6d20c6bb944e3e82defdc5186ed33f6d719d6b9439c7727e19e04ec1b06be2f490ef431633fad560762b57bc55c9e9a8991d1584fd45b90eb2acba22af42ddfe924636c836de0f01d7adb99e0522ebe2ca695333574cf19e717add203ca1848b6"}}]}}, 0xe1) 03:00:28 executing program 2: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x42, &(0x7f0000000000)=""/74, &(0x7f0000000080)=0x4a) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:28 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10010, 0xffffffffffffffff, 0x6) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x70, 0xd7, 0x5, 0x7, 0xbc, 0x0, 0x1, 0x1, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xd2, 0x7}, 0x3480, 0xfffffffffffffffb, 0xb08f, 0x4, 0x1000, 0x40, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='.&\x00') r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000180)="cf55aa47aa1776308a9f9948a6967d97b57a17ee3519893dd1aa7844", 0x1c) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) 03:00:28 executing program 0: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4203, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8008) 03:00:29 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x40400) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xffffffffffff0003, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) mmap$perf(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000001, 0x10010, r1, 0x5f13e868) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000100)={r2, 0x7fff, 0x3ff, 0x20, 0x5, 0x10000, 0x401, 0x9, 0x5, 0x6, 0x8, 0x2}) openat$cgroup_ro(r1, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) 03:00:29 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x26, 0x0, 0x4000, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000040)={0x9bf, 0xe8}) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8802}, 0x200080c1) 03:00:29 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80000001) 03:00:29 executing program 2: setfsuid(0xffffffffffffffff) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000003c0)={{}, r0, 0xc, @unused=[0x4000081, 0x7, 0x0, 0x401], @devid}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000080)={"6dfaf40b37b9b09d1df217fd3097d94d", 0x0, 0x0, {0x8, 0x2}, {0x101, 0x4df}, 0x9, [0x10000, 0x3, 0x57, 0x4, 0x5, 0x100000000, 0xfffffffffffffff8, 0x73a, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x0, 0x1000, 0x7fffffff]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000180)=r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 03:00:29 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xda7e0135face9487, r0) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c95ddd661443eaf00c00080001800012000000000000"], 0x11) 03:00:29 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, r0) socket(0x5, 0x2, 0x0) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x103880) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x200, 0x0) rt_sigaction(0x14, 0x0, 0x0, 0x8, &(0x7f00000001c0)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) 03:00:29 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x80000) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000003, 0xffffffffffffffff) pkey_alloc(0x0, 0x4) [ 1640.747124] Bluetooth: hci0 ACL packet for unknown connection handle 3529 [ 1640.755438] Bluetooth: hci0 ACL packet for unknown connection handle 3529 03:00:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xc, 0x80) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/time_for_children\x00') pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = accept4(r0, 0x0, &(0x7f0000000240), 0x80800) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x404c854) r4 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x80, 0x294042) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) pkey_alloc(0x0, 0x2) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x8, 0x40) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 5: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x50, 0xffffffffffffffff, 0x8000000000000000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000021}, 0x4d53a6050dc482b5) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x1) 03:00:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) connect$caif(r1, &(0x7f0000000180), 0x18) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000a, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000017c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000013c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000003c0)={{}, r3, 0x8, @unused=[0x1, 0x6, 0xb6c, 0x81], @name="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"}) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000040)={0x13d12cf6faf6d54e, 0x5, {0x100, @struct={0xffff, 0x800}, 0x0, 0x7, 0x7ff, 0x10001, 0x0, 0xff, 0x25, @struct={0x3ff, 0x20}, 0x9, 0x40, [0x4, 0xb9a, 0x7, 0x0, 0x81, 0x3]}, {0x4, @usage=0x401, 0x0, 0x401, 0x7f, 0x6a5, 0x81, 0x0, 0x480, @usage=0x97, 0x7, 0x6, [0x8000, 0x6, 0x8, 0x80000, 0x2, 0x10001]}, {0x2, @struct={0x8, 0x4f45feb7}, 0x0, 0x400, 0x3f, 0x3, 0xb7, 0x3f, 0x2, @usage=0x4, 0x4, 0x7fff, [0x5, 0x9, 0x7f, 0x1ff, 0x2, 0x6]}, {0x2db7, 0x7, 0xc}}) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7}, "559efac9c3baf3"}, 0xb) 03:00:29 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bind$can_raw(r0, &(0x7f0000000100), 0x10) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000080)={0x0, 0x100, 0x6, 0x3, 0x2, 0x7ff, 0x8, 0x6, 0xc88c3062, 0x2, 0x0, 0x8}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) getpeername(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000004c0)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x2c, r3, 0x200, 0x70bd29, 0x25dedbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE, @NLBL_CALIPSO_A_DOI={0x0, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000880) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r5, 0x0, r0}, 0x10) 03:00:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1]) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r3}, 0x8) getsockname$unix(r4, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) r5 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000700)) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f00000003c0), 0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25010000002700070073797374656d5f753a6f626a6563745f723a6574635f616c69617365735f743a73300000080004007f0000011400060065727370616e1400020000000000000000000000000000000001050001000100000014000300fc02000000000000000000011400060076657468305f746f5f7465616d000000140006006c6f000000000000000000000000000014000300fc0200000000000000000000000000003fcb682b50b82c35df7a795269f827966434ae5a761ae9d8c503f72dbdf13559727fbd7ed61d8b45cd8ec6f6eb02b5b2e549c59cc2a26757eed5476f931f7b566200"/251], 0xc4}, 0x1, 0x0, 0x0, 0x8810}, 0x4048880) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000200)) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x39d}, 0x8) 03:00:29 executing program 2: sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x218}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 1: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x101, 0x80000000, 0x4, 0x200, 0x340, 0x101}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 5: r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="82aedda500a6a57cccb1d67a39675eec5681232bd74982dcd7a9fe847acabb78c9c6393f8ab8b00c", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000002) 03:00:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfff, 0x12000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000300)={r3, 0xa43, 0x88edcfc, 0x2, 0x1b5, 0x7, 0x0, 0x970, 0x36, 0x7, 0x200, 0x4}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x22e) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r2, 0x1, 0x3f, 0x1, 0x0, 0xeb, 0x2, 0x377, 0x2, 0x7137, 0x9, 0x3}) 03:00:29 executing program 0: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) [ 1640.997151] 9pnet: Insufficient options for proto=fd [ 1641.013803] 9pnet: Insufficient options for proto=fd 03:00:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x2, 0x110801) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001140)={{r2}, r3, 0x8, @unused=[0x8, 0x0, 0x3, 0x1], @subvolid=0xeed}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf2502000000140006006970040000000000000000000000000005000a000000000008000400ac1414aa14000300fe80000000000000000000000015002c14000300ff02000000000000000000000000000108000500ffffffff14000300fe880000000000000000000000000101080004006401010108000400ac1414aa0500010001000000fa9348eef135199a3674b704e668e477a9"], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x101, 0x440000) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getsockname$unix(r1, &(0x7f00000000c0), &(0x7f0000000080)=0x6e) 03:00:29 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') 03:00:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="31d24d73b36eda7c6f1d94084c4715f3fda427d996a151341d9eb7382efe1c35e2d63836bec6cd5fe56f0979cd9a34dbcd606b69ce7abc7b6b0b13c444860ab6e4dd9f6099403f5da7f58043f4885866ed7c7649f596524f6b1392b6724699ca454ebec2b65af12a1dc907cb1d3a8867139144b8a1c2cacc28fa2d93df876972b68d81a33523634a18e3c5a2fd", @ANYRESDEC=r1, @ANYRES16=r0], 0x30}}, 0x10) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xd80, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x14014213}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040881) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"fc60a3862a6779759e875449bf77d62b", 0x0, 0x0, {0x9, 0x7}, {0x100100001, 0xffff}, 0x8, [0x0, 0x0, 0x6, 0x100000000, 0x1f, 0x2, 0xb5, 0xff, 0x4, 0xfffffffffffffffd, 0x9, 0x8, 0x1000, 0x8001, 0x6, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"efcf4c9e0d352fadef0c1d0d36098ecd", r2, 0x0, {0x0, 0x3bc}, {0x5, 0x7f}, 0x87d2, [0x0, 0xff80000000000, 0x2, 0x1, 0x1, 0x1, 0xfffffffffffffe01, 0x8001, 0x1, 0x9, 0x6, 0x2, 0x9a3, 0x7, 0x6, 0x8]}) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16], 0x61) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0xac, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x10000, 0x4}, 0x17042, 0x6, 0x9a, 0x5, 0x17a6, 0x2a2c, 0x3f}, 0x0, 0xb, 0xffffffffffffffff, 0x19) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x843, 0xcb, 0x1f, 0x7fffffff}]}) 03:00:29 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0) socket$packet(0x11, 0xe3915d1029aac218, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 03:00:29 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9aa80000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf25040000000500010001000000140006006d6163766c616e3000000000000000001400060076657468305f746f5f626f6e640000002600070073797374656d5f753a6f626a6563745f723a63726f6e645f657865635f743a733000000014000600697036677265746170300000000000002500070073797374656d5f753a6f626a6563745f723a756465765f657865635f743a7330000000001400060076657468305f766972745f7769666900"], 0xbc}, 0x1, 0x0, 0x0, 0x4040014}, 0x40841) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x14, 0x2, {0xfff, @usage=0x4, 0x0, 0x4, 0x2, 0x4, 0xf92, 0x1, 0x401, @usage=0x1, 0x564, 0x7, [0x5, 0x44c9, 0x1, 0x9, 0x0, 0x4]}, {0x5, @struct={0x5eb, 0x7ff}, 0x0, 0x1, 0x4, 0x1, 0x1, 0x10001, 0x10, @usage=0xfff, 0x8, 0x4, [0x8000, 0xfff, 0x1, 0x81, 0xc6, 0x100]}, {0x44, @usage=0x1, 0x0, 0xfffffffeffffffff, 0x0, 0x7, 0x9, 0x8, 0x4, @usage=0x5, 0x100, 0x4, [0x1, 0x4, 0x4, 0x444e, 0xfffffffffffffff8, 0x3c]}, {0x2, 0x7fff, 0x7}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000880)={0x0, 0xa5be, @start={r2, 0x0, "c1de6058bbf3f7fd0665a705a13018f7e097e97e37b7b5aac0858cd65657a372367de4f05ce51d417f1fd2fb9ba1030b9abe4c58e2ccd089601158249684b938bd9173a0876dcb6502ef40bf6aee9b9def920e39f81b797e24cca6bd70be7ec3dfebae50fac3f414f6f201bd0186ecce49088a2a13d4639bfef216a116e6bf0d09160f7c46d068af51fbf330c500c471623881e0c0bb6a6c66b495c341a1d6252a610992642aa337c379659fa3daf27121211dd9fd20437cfee5e3875caee9b16d886635d467328fc52fde7a706ab9eeefcaaf1878ec52ef7ab3b4c91beb8705d7f79120c53ac019072445f16b70c883ba879e99a5d3c00705731795d94249717286400bbe1dc7ed18c1535a08a6fd465c65350898a52f4e97b4044d7d4550096652315e9dbc5d2335fa079535787f883d1ad4cf72911c29bc9dcc39d87982154a0ef57f69e796dd8e43c4ef5845761da2cff170309d77c903193f21ec61a27e345781240ec46b86c8e86ad5095b87cc9c2964ea90a001290e3e4e75bfbe8a33fea1dd25dfc414d8abac30d2e8b9342a27dbe5ff13deb7cf092d53d6108158ca1e13e40027ccd00b6abf9d9136c241052472728bdd2dcee57f92f147ae9939e8491d7bf13ce20f63a214dbf8961184a37901aef075d6b881e1359e3088b9e0dbb23ae1e86677f1eec1bf787b72e46e22fea1dacd4541187c1d309a3b0d57b07f1197d9bf6727e859dbfde0716eac0c6a7e4fab9251f790940973b64566769d55e59807a4ebdaf3c773bbf0c56cf853100e343cb6063862feabc8efb32f7d48ef907c27b8709bd26dfd3bc04a193e47584569d49f5d9a5589336c3c6e4f022a37fb0328ad64289a7d2fab1ee051055883151dd6b8dcc36e2b0c54bec12daccebe49801ac0d0ade18049e13ae917c3c925f24bf9bff2af4e75ea04d1c657a2f1f2bb9a7b6c6dde43babf4aedbec5ab1e485d2c4cdc1ca14af5d7107c0d4fb48620f0d2c26c4ed242c4d8814ff2ce9a6783f0d3478fc69f7e0d56b8b5f2df551e8db9887ef5c0dd860a7cd56563314d2a4313331aa1a3d0e358a25783b91d490a998408343ef7e979dbf682cf3d1500c9d2a12e71d6e0aaa3e63fbf853d20585e79f3e58480fa838656c4e7ed27b01f648d2094b07f903ec96d7b28840bb1f3fd2a079f5501f1c6516922f0b95a24f80002762f16cc8b30a3d7e015d09a8c62b0b9df867592bd24876d4b87c744154c48869d300bc0539476323234f89c26a20ebed6477c737539e7a32613eaf33aac350bd91e4f8c52edd79d1e151a12639ad91433e7ca63a7888cdcb8aff42a0ccdbf94c1ad0bac09e4a747d3fe6bda1f682a52a0de505aa0872712dd42e68569d780224955bd530c50fb500326f60fb059ce6625cef92653da782aba868b9dab138045689e8891d378ad9038d0ab76e489184956", "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"}, [0x3, 0xfff, 0x23, 0x7d, 0x6, 0xf8, 0x7, 0xe2b, 0x3f, 0x0, 0x3, 0x81, 0x5276, 0x0, 0xffffffffffffffff, 0xaa7d, 0x80000001, 0xf808, 0xfffffffffffffffd, 0x1, 0x3199, 0x40, 0x6, 0x612, 0x9, 0x6, 0x3f, 0x3, 0x7, 0x7f, 0x0, 0x100000000, 0x317f, 0x800, 0x1ff, 0x0, 0x9, 0x430, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x2, 0x3, 0x6b, 0x5, 0x0, 0xffffffff, 0xd09, 0x70, 0x8, 0x1ff, 0x8, 0x401, 0x2d1b9dc4, 0x0, 0x7fff, 0x101, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xd0, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x12}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1a}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x3381, 0x70301) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) 03:00:29 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fedbdf2503000000080002000100000008000200080000002c000180060001000200000006000100020000000500020081000000060001000a000000060005004e23000008000300010000006000018014000400fe8000000000000000000000000000bb14000400ff01000000000000000000000000000114000400200100000000000000000000000000010800030064010102080003000a01010008000300ac1e000106000100020000000c00018005000200ff00000004000180097b69b1115fc533fd356dbd6fa8658fa9a5670600368c89b31ef506678628addbbc7c6e6b91b2b46e01c16bc3235b677340"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 03:00:29 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x404000, 0x0) accept4(r0, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000001c0)={0x190, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x1, 0x3, 0x2, 0x3}, {0x80, 0x80, 0x3, 0x5}, {0x6, 0xff, 0xe7, 0x6}]}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x60}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xe, r2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 03:00:29 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3}, 0x8) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x201, 0x101200) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) socketpair(0x3, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x8, 0x70bd2b, 0x24dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042200000000000000000205728d1e000707aaaaaaaaaa1002f79cbd03060080aaaaaaaaaa1101021d71c64b5d05000000000000f8808551e8080009000000000000091101a781f24707000300"/88], 0xfdd8) 03:00:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x2, 0x2, 0x0, 0x6, @broadcast}, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x88, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x8010, 0xffffffffffffffff, 0x0) 03:00:29 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f00000000c0)=""/229, &(0x7f00000001c0)=0xe5) 03:00:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x7, 0x230a02) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0]}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x0, 0x2, {0x5, @struct={0x6}, 0x0, 0x101, 0x8, 0x5, 0x8001, 0x7ff, 0x4a2, @usage=0x81, 0xb8a8, 0x5, [0xc2a0, 0x80000000, 0x8000, 0x80000001, 0x92, 0xffffffff]}, {0x48000000, @struct={0x0, 0x3}, 0x0, 0x2, 0x5, 0x0, 0x9, 0x10000, 0x40, @struct={0x6, 0x101}, 0xa09, 0x400, [0x4, 0x1ff, 0x3, 0xf715, 0x5dc953f9, 0x7]}, {0x80, @usage=0x2, 0x0, 0x9, 0x40, 0x121, 0x7, 0x1, 0x486, @struct={0xf8, 0x8}, 0x520, 0x7f, [0xfffffffffffffeff, 0x574, 0x9, 0x80000000, 0x5, 0x3]}, {0x8, 0x3f, 0x2b}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000007c0)={0x11, 0x0, {0x26d, @struct={0x0, 0x4}, r2, 0xd2c, 0x3, 0x6, 0x3, 0x2, 0x400, @struct={0x3ff, 0xfff}, 0x6, 0x0, [0x2108, 0x8, 0x1, 0xe3d, 0x6, 0x1]}, {0x3, @struct={0x1, 0x3ff}, 0x0, 0xae3d, 0x99, 0x4, 0x8, 0xffff, 0x4bc, @usage=0x5, 0xffff8001, 0x0, [0x8, 0x7f, 0x8, 0x3f, 0x1, 0xc00000]}, {0x1, @usage=0x8, 0x0, 0xb095, 0x5, 0x9, 0x9, 0x4000000000000, 0x5, @struct={0xffffffc5, 0x1000}, 0x82c, 0x1ff, [0x7, 0x80000001, 0x9, 0xffff, 0x9, 0x3]}, {0x8000, 0x2dcd85cf, 0x90000}}) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x1f) 03:00:29 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x300, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x400000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x6, 0x3, {0x7, @struct={0xe9, 0x7}, 0x0, 0x2, 0x4, 0x8, 0xffffffff00000000, 0x2, 0x20, @struct={0x2, 0x81}, 0x8000, 0x6, [0x5, 0x3f, 0x6, 0x3, 0x7, 0x9]}, {0xf3d, @struct={0x1, 0x4}, 0x0, 0xb69d, 0xd72, 0x3ff, 0x1, 0x4, 0x8, @usage=0x1, 0x3ff, 0xff, [0x4, 0x4, 0x1ff, 0x0, 0xfffffffffffffff8, 0x3]}, {0x6, @struct={0xae, 0x1}, 0x0, 0x10001, 0x3ff, 0x5, 0x40, 0x7, 0x8, @usage=0x81, 0x7, 0x2b7, [0x81, 0x0, 0x0, 0x1, 0x6, 0x10001]}, {0x8, 0x7, 0x6}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000bc0)={0x8, 0x7, {0x5, @struct={0x1f, 0x4}, 0x0, 0x8, 0x100000000, 0x4, 0x4, 0xfffffffffffffff9, 0x4b, @usage=0x7e780d88, 0x0, 0xbba, [0x5, 0x1, 0xff, 0x4, 0x1f, 0x10001]}, {0x2, @usage=0xffffffff, 0x0, 0xb835, 0x200, 0x1, 0x3ff, 0x1, 0x201, @struct={0xe4e9, 0x7}, 0x3, 0x1, [0x5, 0x800, 0xd793, 0x100, 0x5067]}, {0x200, @usage=0x2, 0x0, 0x2, 0x7, 0x5, 0x4, 0xbcbc, 0x40, @struct={0xff, 0x40}, 0x1000, 0x0, [0x8, 0x1, 0x80000000, 0x200, 0x4, 0x7]}, {0x80, 0x2ca, 0x3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000013c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000fc0)={0xc, 0x5, {0x80000001, @struct={0x401, 0x3}, r1, 0x6, 0x8, 0x4, 0x4, 0x101, 0x8, @usage=0x7f, 0x80000000, 0x80000001, [0x4, 0x1000, 0xffffffff, 0x5, 0x7, 0x39]}, {0x9, @struct={0x9, 0x800}, r2, 0x5, 0x8, 0x1f, 0x401, 0x7, 0x421, @struct={0x8}, 0x9, 0x21, [0x0, 0xffffffffb1b82a2f, 0x4, 0x1, 0x1ff, 0x7]}, {0x20, @struct={0x3f, 0x1}, r3, 0x6fa1, 0x4, 0x379, 0x0, 0x3, 0x85, @struct={0x9, 0x3}, 0xb3d9, 0x1, [0x81, 0x2, 0x101, 0x7f, 0xad9f, 0x9]}, {0x2, 0x3fe, 0x7}}) 03:00:29 executing program 4: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@remote]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x3, 0x8, 0x2, 0x3f}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400080, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xfffffffeffffffff) 03:00:29 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_names}) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040040) 03:00:29 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xf4, 0x400d83) pkey_mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x13, 0xffffffffffffffff) 03:00:29 executing program 0: socket(0x27, 0x80000, 0x180000) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:29 executing program 4: syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x1b}, {0xc3, 0x4, [{0xc9, 0x5, 0x7}, {0xc8, 0x0, 0x5}, {0xc9, 0x4, 0x2}, {0xc8, 0x3, 0x100}]}}}, 0x1e) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x4) 03:00:29 executing program 3: syz_extract_tcp_res(&(0x7f0000000000), 0x6572, 0x81) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f0000000340)=""/21, 0x15}], 0x6, &(0x7f0000000640)=""/163, 0xa3}, 0x40010100) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x3, 0x5, 0x60, @mcast1, @dev={0xfe, 0x80, [], 0x1e}, 0x80, 0x7f10, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x248, 0x0, 0x4c6120fcf2996c2, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x248}}, 0x800) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) [ 1641.526522] Bluetooth: Wrong event for mode 0 [ 1641.532704] Bluetooth: Wrong event for mode 0 03:00:30 executing program 5: socket$netlink(0x10, 0x3, 0x6) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000007, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 03:00:30 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x10100) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x101801, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x304d429a, 0x1}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=0x1, 0x4) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r3 = socket(0x23, 0xa, 0x8) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) bind$llc(r4, &(0x7f0000000500)={0x1a, 0x30f, 0x81, 0x81, 0x31, 0x1}, 0x10) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x33}, "35f1ff8fba24f404ebf011a570b47f443101f74cd488bc3617122df6171ec9ce5cd3e2c9963db92d315dd8573a9635a67ab266"}, 0x37) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) 03:00:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x100, 0x440100) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000600)={0x1, 0x2, @start={0x0, 0x0, "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", "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"}, [0x14000, 0x4, 0x100000001, 0x5, 0x8, 0x9, 0x800, 0x400, 0x86cb, 0x7, 0x4c, 0x4, 0x9, 0x81, 0x8, 0x5, 0x1ab75d6e, 0x9, 0xfffffffffffffff8, 0x9f99, 0x4cad, 0xeb, 0x4, 0x3, 0x9, 0x3, 0x1d9c000000000000, 0x3, 0x2, 0x4, 0xfff, 0x31, 0x1, 0xbd07, 0x5, 0x7, 0x3, 0x6749, 0x6, 0xfffffffffffffff8, 0x2, 0x3f, 0x6, 0x2, 0x6, 0x969, 0x6, 0x7, 0x81, 0xff, 0x1, 0x9, 0x1, 0x9, 0x3, 0x6, 0x66a, 0x28, 0x7, 0x9, 0x100000001, 0x6, 0x8, 0x42]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xa1, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000031c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8810}, 0x4000010) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x400, 0x0) write$tun(r5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x107a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000500)={"0ff2a5a0686b005c93f8a85da7f40b97", 0x0, 0x0, {0x1ff}, {0x0, 0x4}, 0x8, [0x3, 0x9b57, 0xd29, 0x6, 0x2a1d, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, 0xffff, 0x2, 0x8001, 0x8, 0x2]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000021c0)={{r5}, r6, 0x0, @unused=[0x8, 0x3, 0xfffffffffffffffe, 0x6], @devid}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)}, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r1, 0x4) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xa0142) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$inet_dccp(0x2, 0x6, 0x0) 03:00:30 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x3, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x71, 0x0, 0x9, 0x2, 0x1, @loopback, @empty, 0x20, 0x80, 0xfffffffa, 0x4}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xff, 0x7, 0x0, @private1, @mcast2, 0x11, 0x7800, 0x80000001, 0xaee}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x5, 0x0, 0x5, @private1={0xfc, 0x1, [], 0x1}, @private2, 0x8000, 0x20, 0x71, 0x5}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', r1, 0x29, 0x4, 0x2, 0x1, 0x5, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000, 0x40, 0xa9a, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', r8, 0x2f, 0x6, 0x5, 0x4a, 0x21, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x8000, 0x8000, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x2, 0x9, 0xc, @dev={0xfe, 0x80, [], 0x43}, @private2, 0x8000, 0x8000, 0x401, 0xd7}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000f40)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0xc7, 0x1, 0x4, @empty, @loopback, 0x10, 0x1, 0x2, 0xf5b}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f0000001000)={'team_slave_0\x00', @ifru_addrs=@xdp={0x2c, 0x0, 0x0}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001900)={&(0x7f0000001980)=ANY=[@ANYBLOB="88080000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="880102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000044000100240001006d6f646500000000000000000000000061c7d2bb1d9669a40000000000000000000500030005000000110004006163746976656261636b7570000000004000010024d05e006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004007d1ba09d9670c194a2614375ef4d390d", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000008000100", @ANYRES32=r3, @ANYBLOB="6402028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff07000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e003000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040005000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040040000000080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f7274446d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d102000008000100", @ANYRES32=0x0, @ANYBLOB="c00002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff7f00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff01000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000001000008000100", @ANYRES32=0x0, @ANYBLOB="640102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f7ffffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB], 0x888}, 0x1, 0x0, 0x0, 0x48814}, 0x20000000) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3000004, 0xffffffffffffffff) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20403, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) 03:00:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x5, 0x8100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:30 executing program 4: r0 = socket(0x26, 0x3, 0x2) r1 = socket(0x18, 0x0, 0x2) socket$caif_seqpacket(0x25, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000040)={0x2, 0xdee, @start={0x0, 0x0, "f906cb8e40aacca7b84f3df3e989718c0143e5f9d243d4d98bdda167f084df1dbf4cf4c84807380e21300a4db4fd683929803bed6f2fceed34fb0189f45d35f19be77b40ebea59a6b3a4591dbdb6ad93f92e4a5a9b8619931684b9c6856f48cde0182c381d0f8786b58ef76a37a76bafd6cb1f6645427475d5a14eea5dabd1595d664c0aca627c0b2c353bac3b93d534b65a8c7c8a0972da467f65bdff1535f03e6edbb1cbf9e606d031889da5fd5f39dc0221cc854f4c4885272eaccac08d21bc00175482a65549485e90f44ce0ef06fdb71e6f3df8542b37ee5f18015517d1cc3c2ceb9ab0634587480520f29c17a24dc05882fb80e7c35414ee6118c52a7f7eb5866d491bb502fb1c1ca270917ecb0416361b281267526dddf75c976dd53f41c3f3cdffe2bd0b8be645d46ad12b5392cbef5865a99bb0b1e4e13d7bb2b02042efdb525c069fd6f528f10875238658ffac1a398bf47955f203008be895e8c98af5bd2ffd417c08f321f6c74ed784fef5ca2f9de82ac035484000a81a10b223cfd0b0dd0c0bca97d3f28995b1003e3cc98d15d4626e1661b0feddba615fa13a02393c019ab839800fa3a514673527b187446c6394741a4233cc0ddec6ade1b52d10a0683d6664042d2ad2d712824e6c3a709f21b2fadf743c88b843130e87b0af7830271846acc74c7a0dbc66f296d62d07c68c7caa2a50aea8f0b2d799fe8c79ad66406a6ea6d2c4f8ff77c1d6ad615ecb004a134f6312a109b584aed38f2172bc513f727644e15906757d1cb5c7aadd5aa1de8b72e52eccc4af934b5e115340959cde43e6f82189af60f3fb5fe175223713058014a1e7eb8b996738789c805fca3b5ae3579c31a42ff7e9145a22ea0d70ef9073d21a07e69489e64c2ef5444be99277a52138e166528eb5a6824adca40bbe200ddaf9fe92d47b7df3e6f2d92345ce00bfbc14ca060a1b9a700ff29a684d94d787b34b5004c86a2a84b00208cab37c89721cfacfd12a374585325db8804d77e5abb2db3aa67b153082e3dcacd3867b69842f060baa7834f3d6e8433e0b3cf5bb318b21f347b1380cd29ce3d44509b9918662b0fa81364596b037d3da8e9a7aeb90b7b72cf9f3a4ca384ef86a62751f82f16899ab7032fd02659ed98cd9902b8f37c6a17bcfb81e77d2338694e60a463b8eefb76d76d2e5a12f62005f149917985f2baa4c35771178b825df5f2ba9a45c2135179c03082e09f8b744a19696e5646c4aa90a0f9b8c8f56ea9a63ae003dee7330dea6ee2b69f4b77881880f3a42f82040d1e9c64890096856a28ccc805e1a26adb0ee2783dcf1a07a3ef1863e7e59f5381106ce0695043059d87c90267c921904bc3f72fa90b90208aff7d2f95165b432524210d2d3515638562d88312a83f1754aaf2c2f11c631c020a63ae85bded79b91b7098732965378224578", "736a0b3097ecc6a041f94e6a19b16c4e06a0a5e4c78e140c4392ec01eb2f03b851f4bce557cccbb64c87ba32da0197d27dd0ddd63328751110ec4e89040ab844d6e38eedf6dc748569690ab49cad96c2e6b83f65166785bd3b2eef790c7ada820705fd6f4435efd24f66873d2a2bf4b8ab8447b9a5b98cdcdd88d9b65ee8d558dab12c03108419a8441e9477be4fdec860585eaa6b9dbfb452c9cbc21dac1985de19615a99263b8b6949cbc5c3df85de2fc7949c79c1eb156a3dfa9ebcc19962b0916ab536c5f0aa5f5244e5ec7fb7f064340ca2d3fbe1dce7f74cfae06570f686ec14b8959e8779d3a014fa394651385eea74dd83a8ac05ac249a44ec08e91a9aec6697c12522a3a545128b920c1ec642bfbb10f902174a504301181e963bde6a0070770fffd49a3fa14a6d4e6314ae6b2d2e62606cfd4d9a29338eb9556b1b0283dc874e681c4bfa532b5ac6fac5e9d0f8d7d69f2fe946224d3e50bd563f1d2596b3c09c5bfd35f50e097e1487656a3abf31f763e9ff282047d0e9b34aaee520442fb8eba3bbf17ab614b2468a780c1f7b2cfbbb2ffbecdbcbb27b81048b6db818c6d57d503fef175328df5c344578b1896597d2aa9ef4b148a9f66e673ba714476498a4a8cbe4cdaede9134a22506ad5a9c7951c2544795f9b5f2e52a6e2a2142daface3cf09855697f5c35225d913758d6da0025a8f0d0762ce17a976177e50fd89c6160994c7feb1520826b62df52acf3349e572a52fd7ec2a3b20f9e38cafefe2d0b8abb1952003bd4116ffbf010bc438149e2502ad295ced29e79e60524b5dc5a9172332e0ebacf6d77143343b7933ae60f80ff6fc31c98a3a104893953db296fc265cf2b4070b7570229a445becb7b7b4fb06840c7e10ff4ad183fb65ef6a489c42ea04cafdb7aaaea4a1d2bb6fe1a63e060b4ccdec93f19bdfece4ff0ad6922d830b46555e67f4f2818c67126f77edc3c020e7b1d06cd345936b74d7daef9aaccc17ced5a3885d422621fe72b5c0009523185a86ca6643c7a09fb00b7d95dacfe6a6b99652a707341c4f3cf837fed45988ef04362202c9d084ea83caa98b36f003cb112399b3bf0c00075903f79ac525d4c76038a7989d2e21bcd1371bd6229fa8f0289a54163af2269ff036cd6a1d229ec67a2119ffa1c39826682dc2475d820d05b24cae7900719efb145f099925f033d77e052a8ffbb76602fce2f1d2bfc0c3123a5b5d6a82bafc0caccf80fec2271d9af206f4289d6ed3e080f452f428a7a234ba8e1114f5e58c2c7aae38c5805f5c17b3a75e26a3300566620af938669ccfcacae1f0924051382e79e47c7830852c276d6b294373da56735ec08dab81a383a3703892685e1bbbfa0f10cafa65c94cce99d352a21381fd048402c5a14ecad0d22005e8059aac6f2161a7be3d519dbf956476518a6f278cd32abe7"}, [0x4, 0x6, 0x9, 0x7, 0x0, 0xf1a, 0x9, 0x7, 0x7, 0xf8, 0x9, 0x8, 0x5, 0xf5, 0x9, 0x8, 0xe84, 0x6, 0x400, 0xffffffffffffffe1, 0x8, 0x100000001, 0x0, 0x20, 0x6f755ea0, 0x1fb, 0x1304, 0x8, 0x1, 0x4, 0x2, 0x7, 0xff, 0x8, 0x5, 0x54, 0x3ff, 0x1, 0x423, 0x5, 0x6, 0x20, 0x3, 0x6, 0x4, 0x401, 0x100000000, 0xffffffff00000000, 0x3, 0x7, 0x100000000, 0xffffffffffff86a8, 0x3, 0x5, 0x8a29, 0x6, 0x7, 0x4, 0x7, 0x1, 0x187, 0x2, 0x6, 0x1]}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_move_chan_cfm_rsp={{0x11, 0xfd, 0x2}, {0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x1}}, @l2cap_info_req={{0xa, 0xd5, 0x2}, {0x7f}}]}}, 0x1b) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x10000000, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x4, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30f, 0x2, 0x7, 0x6, 0xff, @local}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0xc) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 5: mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x7ff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x251803, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7, 0x4, &(0x7f0000000080)=0x6}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x6, 0x0, 0x9, @dev={0xfe, 0x80, [], 0x30}, @mcast2, 0x7800, 0x20, 0x2, 0xaaf}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000010c0)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@broadcast}}, &(0x7f00000011c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0x88, 0x0, 0x100, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0={0xfc, 0x0, [], 0x1}, 0x8, 0x700, 0x6, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001400)={'ip6tnl0\x00', &(0x7f0000001380)={'ip6gre0\x00', 0x0, 0x4, 0x3b, 0x55, 0x9, 0x7, @dev={0xfe, 0x80, [], 0x34}, @mcast1, 0x80, 0x20, 0x28, 0xfffffffa}}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="9c060000", @ANYRESOCT=r6, @ANYBLOB="000428bd7000fddbdf2501000000080001003fb2165c12247d8dfc1aa54d3922f7e59a72da", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r2, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d11974b57d822c4b701006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES64, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1801028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000100060807000000800009057f000000ff030700eb050000000012050900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400018000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES64=r9, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002501000008000100", @ANYRES32=0x0, @ANYBLOB="f00102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff7f000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000100080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="28e302804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400760200003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f00000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000008008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB], 0x69c}, 0x1, 0x0, 0x0, 0x4010}, 0x44) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x23881) socket$netlink(0x10, 0x3, 0xc) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000080)="9c599f197b14ce0920e511be913837492e6723e5389867", 0x17) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000000000d8db9375c3"]) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x309, 0x4, 0x3f, 0x6, 0x40}, 0x10) 03:00:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x443, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x100, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4080) pkey_alloc(0x0, 0x1) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x608202) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x7fffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) socket$unix(0x1, 0x5, 0x0) 03:00:30 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x119080) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={r2, 0xff, 0x40, 0x800, 0x756b, 0xff, 0x3, 0xff, 0x6, 0x2b92, 0x949b, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r3, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:00:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x32, 0x81, 0x1f, 0x11, 0x0, 0x1, 0x2108c, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x4082, 0x3f, 0x6, 0x4, 0x3f, 0xf4, 0x2e2a}, 0xffffffffffffffff, 0xc, r0, 0x5) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000007c0)={0x8, 0x1, {0x0, @usage=0x5, 0x0, 0x1, 0x1ff, 0xd45, 0x2, 0x2, 0x8, @usage=0x7f, 0x800, 0x8, [0x100000000, 0x7fff, 0x6, 0xffffffffffffff7f, 0x7, 0x5682]}, {0x879, @usage=0x7, 0x0, 0x2, 0xae, 0x7, 0x8000, 0x7ff, 0x82, @struct={0x3, 0x81}, 0xd9c, 0x3, [0x1, 0x1, 0x9, 0x400000000000000, 0x2, 0x1]}, {0x2, @usage=0x3ff, r1, 0x0, 0x40, 0x2, 0xfb, 0x4, 0x59, @struct={0x8, 0x3f}, 0xfffffffb, 0x4, [0x7f, 0x6, 0x4, 0x1, 0x5, 0x4d]}, {0x3, 0x80000000, 0x2}}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x11, 0x6, {0xf0, @struct={0x80, 0x9}, 0x0, 0x200, 0x77, 0x7, 0x6b, 0x74e, 0x1c, @usage=0x39, 0x7fff, 0x6, [0x6, 0x9, 0x7, 0x3, 0x5, 0x8]}, {0x3, @usage=0x1, 0x0, 0x7, 0x2, 0x49de, 0xffff, 0x8001, 0x90, @usage=0xfffffffffffffffa, 0x400, 0x0, [0x1b, 0x8, 0x10001, 0xdc08, 0x81, 0x80]}, {0x3, @struct={0x80000000, 0x4}, 0x0, 0x3, 0x6c, 0x6720, 0x9, 0x6, 0xc2, @usage=0x1f, 0x5, 0x20, [0x4, 0x7, 0x3, 0x4, 0x4, 0x6]}, {0x5, 0x1e, 0x2}}) pkey_mprotect(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 3: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0xffffffffffffffd1) bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x10f, 0x4, 0x6, 0xfc, 0x20, @broadcast}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@dev={[], 0x30}]}) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:30 executing program 1: accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) pkey_mprotect(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) r0 = socket(0x2e, 0xa, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 03:00:30 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000140)=""/90, &(0x7f00000001c0)=0x5a) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04460005c900082ed40b7ff56148a68dbc646b2d37fa6edd4d596e0b46cc923fd856900c240b4be7cff853a1225749c6c17e16d8e8c3089f9c0bf1daac1defd697194238e190500f7e6c98eca9c8712d59ac205fa25ca37be5d6bfa0726e01f3b2a3950eaa905fc682d638b5b406a4c8aea235808edf71080c4078e38d12838237851bfa475bacb20fcbb7cbbc8cfe243afe396811a4652cd8b4242c6e6c93dffd18a3c2ec6dba6a"], 0x3) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x48, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='^@\x00', 0x1) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x6, r0) 03:00:30 executing program 2: syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc9, 0x1, 0x3f}}}, 0x9) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x229, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0x4) 03:00:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x100) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 5: mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000007, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x47) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mmap$perf(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x3) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x200042) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x20204, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, 0x5, 0xe923, 0x6, 0xd117, 0x7, 0x1, 0x3, 0x3, 0x2, 0x3, 0x40}) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x100000001, 0x94181) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x1) pkey_free(r0) 03:00:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x408140, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000240)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) r2 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@multicast]}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x25cc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xb}, @map={0x18, 0x8, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x90}, @ldst={0x1, 0x0, 0x0, 0x7, 0x7, 0x20, 0x10}, @ldst={0x3, 0x1, 0x6, 0x3, 0x6, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x11, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x3}, 0x10, 0xffffffffffffffff}, 0x78) getpeername(r2, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f00000001c0)=0x80) connect$caif(r2, &(0x7f00000000c0)=@dbg={0x25, 0x3}, 0x18) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) r4 = openat$cgroup_ro(r1, &(0x7f00000007c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000001e40)={'syztnl1\x00', &(0x7f0000001dc0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x8, @private0, @mcast1, 0x1, 0x1, 0xe6f}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000001f80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x9c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x9c}}, 0xc1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x401, 0x402a40) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008880}, 0x24044801) 03:00:30 executing program 2: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x38}}, 0x2c090) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:30 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x4000, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb, 0xb67, 0x7, 0x7fffffff, 0x100, r0, 0x4, [], 0x0, r1, 0x3, 0x2, 0x4}, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 03:00:30 executing program 0: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$sock_ifreq(r0, 0x8911, &(0x7f00000000c0)={'vxcan1\x00', @ifru_mtu}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000300)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x52}, "ea052eb22a235e2023a0755df85ebcad8cb2f21d4f40bdc93bf9e089c351b95985fb5eb37a59d56f5547f92a681b6203bbdcf9703b44bc7569742d13dcf56ef441b0a7180a4ede91b8a13e29b634406a2554"}, 0x56) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0xc) syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x85}, "051c85a7be5dfd9aa321b4472fe6e9d769bb282eacf7f33e9cd3c1656a88638909e1e5821be88b59d81c77677f37335247010267bb673593c5abb3a2c36bfb5491a2c354bf6d58a733b5cdd658256724308b978ab95aae6d1b27c75c3d57b9de60d2275ac2ebd9efcee2d5a5d8cfa9ccbc8fb510104fb01ad4ba0a4ed53161536b22c058b3"}, 0x89) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00') syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0x1c, &(0x7f0000000200)={&(0x7f0000000440)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004005}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) 03:00:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @multicast1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000820) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:30 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffffffff0000, 0x2d22c2) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x400000) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x10000000000, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="e949dab3678d9badca558920846647fe5e15a732351f467edde5bad41febc8814b6fd90c05f429cb938caa08ae0373aa5e00313b8c7397c832973ee1d9e46b4db3641332e76252dd826f7d54ee2e5997ab31a6b41abf3d25863509e8c6d5c42062ac4abea8a483e8dfb19e8f72b3f71c4454cf2fb9188b88298845f192ad", 0x7e) socket$caif_stream(0x25, 0x1, 0x4) 03:00:30 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x25d, 0x1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf2502000000080002000200000008000100000000000800020002000000080001000300000008000200020000000800020002000000080002000200000008000200020000000800010000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040080) 03:00:30 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x7, 0x71870a631152cee8) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xffffffffffffffb0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x4c2c1, 0x0) 03:00:30 executing program 2: r0 = pkey_alloc(0x0, 0x3) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_free(r0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 03:00:30 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r0}, 0x8) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000003c0)=""/185) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) getsockname$unix(r3, &(0x7f0000000480)=@abs, &(0x7f0000000340)=0x6e) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="24002bbd7000fedbdf2504000000300001800600010002000000060005004e21000014000400fc02000000000000000000000000000008000300ffffffff08000300040000000000030005000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4820) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='mptcp_pm\x00') pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:30 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040011) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) 03:00:31 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d39b17abfe7480e96d7d450f34b15b29", 0x0, 0x0, {0x6, 0x7}, {0x4, 0x718}, 0x1000, [0x7ff, 0x636, 0x2, 0x8000000000, 0x4, 0x7fff, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x7, 0x4d, 0x8, 0x3, 0xc8, 0x7ff, 0x6d]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000003c0)={{}, r0, 0x4, @inherit={0x68, &(0x7f0000000100)={0x1, 0x4, 0x5, 0x5, {0x25, 0x9, 0x10001, 0x3, 0x7}, [0xfffffffffffffffb, 0x8, 0xe4c, 0x7]}}, @subvolid=0x6}) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 4: accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000041c0)='team\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x12800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/55) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80303, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x3fff, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x10500) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) r1 = socket(0x32, 0x5, 0x2) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r2 = accept4$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80000) accept4$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x800) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000340)=0x6e) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000100)="a36d6f358650d332b08a25bc7a4fc21840619cb3c81b69cf42b96f392e7bff9c5de22c991a155dabe335613f695f7fcfb32d13b8cbcac29ea31546e800d0030fec64a09f0ab796f656ab35ebfc0b7c14f1abb44db6143240d04a00908bf01eb76adddb62515bed01709443cbce2df2005d970d74b0a92ced261cd28c0efc0f1ee1d5084ff313f9fd16a59e9666b477615784094b8788f9d2c3892a801124a890d998ac84b96523e59af6bb01be38", &(0x7f00000001c0)=""/165, &(0x7f0000000280)="436a127303360cb869ca6006d4cf5bdb942d73d72ecc77f51c42c1a89b60d92f1c99d9f630b9b49f1138c68e9cf352040daa2235ea422b6120dd961ad3df057366cb4400298413a6725b1519f8a50d724e319aa488496bfa123359265427c9eac676ba8ac2b6718818d8", &(0x7f00000003c0)="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", 0x5, r1, 0x4}, 0x38) socket$inet_icmp(0x2, 0x2, 0x1) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000004000/0x400000)=nil, 0x400000, 0x4, r2) 03:00:31 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x145400, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1b, 0x400002) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00'}) 03:00:31 executing program 2: pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:31 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x9, 0x7, 0x1f, 0x1f, 0x0, 0xfff, 0x1802, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x8, 0x200, 0xff, 0x7, 0x6, 0x1, 0xffff}, 0x0, 0x4, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x7f, 0xfb, 0x0, 0x3, 0x0, 0xffffffffffff91e5, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x400}, 0x110aa, 0x9, 0x6, 0x2, 0xc56, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7fa5855a6bf70cb, 0x30, r2, 0x2) r3 = perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x7f, 0x80, 0x5, 0x7, 0x0, 0x7, 0x400a, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0xdf}, 0x10, 0x1ff, 0x800, 0x2, 0xfa6a, 0x80000001, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x3f, 0x7, 0x7, 0x2, 0x0, 0x7e7, 0xc0000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x1f, 0xe4}, 0x47208, 0x4, 0x9, 0x8, 0x0, 0x86, 0x8}, r1, 0x0, r3, 0x2) 03:00:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x48844) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x480e00) pkey_mprotect(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x3000000, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000100)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=ANY=[@ANYBLOB="06e0001000000000"], 0x8, 0x0) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x2000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8040, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:31 executing program 4: setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x80, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c0, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x4040801) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 4: getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="020c0008040604001aa5941aaabd600000"], 0x11) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_dccp(0xa, 0x6, 0x0) 03:00:31 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x5, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) getsockname$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000000), 0x0) 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x8, 0x1000, 0xea5, 0x8, 0x861, r0, 0x5, [], 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000140)="9615e18f7a6747617bef20207725d6b7534fae2c4b0ce5cee36b2d823da5bb035ff98b00583d124d1738547388dfb8c14196ef6378010dd465de06c2e58649915dc7b8f97e8ff5d965bf41f862", &(0x7f00000001c0)=""/65, &(0x7f0000000240)="d111cbc6a4cf9a754c34e2fcda4906eec1f6d11aec0b65b223aba68410492a0c55b912f39b5ab1df0fb6ebde6a9a96186cf400b96bb47e4fe39677d5e40b0ac04d388bc2454e6ec3780d3fda696e52c083b0f34d0dfc8e9e5127bbd0aa71e08ee028e63eafd33b159740625341d61688e2b31c3f8c0b1dda86ea470f6adf86fc292b72f3d98194ee0c2af53acc63f6dffbd40dbe57b2f3f16f6a4b901c1a580bb08c2d3f8a6a6f8d3fd5ecf38fe28d4e3a", &(0x7f0000000300)="a2c6bb6363", 0xfffffff8, r1}, 0x38) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r2 = getuid() setfsuid(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap'}, {@access_client='access=client'}], [{@euid_eq={'euid', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x34, 0x31, 0x1, 0x31, 0x32, 0x62], 0x2d, [0x32, 0x66, 0x0, 0x64], 0x2d, [0x65, 0x33, 0x64, 0xab], 0x2d, [0x32, 0x38, 0x62, 0x34], 0x2d, [0x36, 0x65, 0xa, 0x34, 0x62, 0x39, 0x36, 0x61]}}}, {@appraise='appraise'}]}}) 03:00:31 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001080)={0x1, 0x37c3, @start={0x0, 0x1, "0b09dd15fc0c065e3cd7a5b9edc209f154f047c617667b961d03d4df473daa596f41b27df9aa017e0dcdbda1392c9ec9c78b73396f701eb261b875c354853aeea69a3e33c1d4c0e552ee1e4acad1badebf1b2d7ab82d53485dbe0d9a4130a52608bcb159cb17adad5e6aefd38c457d12526c530ff8059c9b05d7ff2255d7f33177a747da2b37693e06ac057b609900d8de159da37eae070195d977141b7ca45f05b0e61b82c2b79a14ee6af46c13a064e697cbcc5b977f5eb40cf59d06dd903327fd14885b0293950386787950dae48509a1d43b1e6873916db3512a6099634eddcfca1f3b43c0b07ee92ce882837eb24e25a1a3be555b184adeaa4da749542dd214cea79ff38ed5308658cf04fe7ae7abf07c7ad22805955f551541f0b410cd6b4dbac77afe26ed2fe22726a5716591c3ee03af9b8dbc100ec750678e939c66f8771e58999661da08591cf2f53864154a7036576987e59e79979e733cd232b31357870a298a2c24ea5b0089c68523b2fa3f9064dbda577cdea5a896d114e833703b62e1f0e64dd6bd8105e1c31774002ac6e0f5491f4a21d1fdd48ebb3920bcde7694de5c4af33c4e308b9e0a85ad4b6afdddf63c8d6c91db4e78ec2f8f241be8018f73146f25483a25d738117394a4b8997b82e61c72670510368fe2693cca5fdaa11421eb423d316d34f53b8d36594f843e3b4ec38814694fe94e3a94e33697fac4bea25324eb87d514f7f68406a593a61312de561e27010bd148e34a56ab484913e0200c7163f6a949bc24c5eea9836e1e7026d38951de37d4fa0727c40021124923d22a99c24c27fd0a48a78570888aa78713f81a5c2e06cbc585ed9a701f278632636fe522761e518c3545c486a35b1d9f70a4214928be3b47c671df92f3adbd8a0fdc58644a9b47e2c270ddafbee375d1510f99af8f33455a66fd061a9b68faa2ca09049c0fef489f607518e0d80bf04d0caf9351fb5ccbcccfafacb6071b57a80ee93acafbca210531aca176873c118778b10a2b2039472c0f04a40c4bff74a7ba4f5b78140a8c9729e3411ae0fc7d20c329ecd816a8815072dfec3b0a359fc1fd055d9c02d3435661daf8cacd62c71f5522b1d9f77c721ad587b82ea3a82e6e1472ec22ae79852222c8d0604c1c843149949edf1648d4a9568813cb794e8e59b3e783083b0b20567d86da1225c3b507782d42e3a1f675a4549dd458855631467ba2cd4ae286d5cfc400d445619ba1585a680445778c5f414046132fd45e22989d9691512c50e5e1b92c03a281f65c5917cbec672c9a03d5755ed6d626dd3c0e68b3e9a208ab253a92cb13508bd1bf6329afa87e34ae62847192292b385f1619d839d47dadfce59152f261a6f6987f328265661970a361f31919e011b2ea1d016ec688c7ac251b0b438305ced22cf5bec705702c76e99847d14aa02090", "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"}, [0x1, 0x3, 0xfffffffffffff8f4, 0x7ff, 0x3, 0x0, 0x20000000000000, 0x401, 0x5d94, 0x6, 0x401, 0x10000000000, 0x2, 0xf27, 0xfff, 0x9, 0x80000001, 0x9, 0x96f1, 0x7ff, 0x3, 0x7, 0x4, 0x3ff, 0x9e, 0x5, 0x204f5114, 0x80000001, 0x3f, 0x9, 0x8, 0x4f, 0x7, 0x74, 0x2, 0xff, 0x81, 0xe7, 0x5, 0x8, 0xfffffffffffffffa, 0x76, 0x1f, 0x0, 0xfff, 0x2, 0x8, 0x19b2, 0x5, 0x8, 0x3f, 0x7fffffff, 0x0, 0xfffffffffffeffff, 0x9, 0x200000000, 0x7fff, 0xffffffffffffffec, 0x3, 0xf67, 0x81, 0x80000000, 0x3, 0x100000000]}) write$sysctl(0xffffffffffffffff, &(0x7f0000001ac0)='7\x00', 0x2) socket$inet6(0xa, 0x800, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001040)={0x1, &(0x7f0000000000)="d0b55e", &(0x7f0000000040)=""/4096}, 0x20) 03:00:31 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0x6}, {0x8224, 0x401, [0x8]}}}}, 0x13) 03:00:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x189000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x200, 0x8}, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000200)={0x7d863eb2, 0x7fff}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0)='net_prio.ifpriomap\x00', 0x2, 0x0) [ 1642.914330] Bluetooth: hci0 ACL packet for unknown connection handle 12 [ 1642.925279] Bluetooth: hci0 ACL packet for unknown connection handle 12 03:00:31 executing program 2: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x1000, 0x426080) r0 = pkey_alloc(0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x6fe5, 0x10}, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) pkey_alloc(0x0, 0x2) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0600fb409803"], 0x9) pkey_mprotect(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000001, r0) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xaee, 0x81) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000008, 0xffffffffffffffff) 03:00:31 executing program 4: getsockname$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) 03:00:31 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) r1 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='9p\x00', 0x2010000, &(0x7f0000000200)=ANY=[@ANYBLOB='transFfd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',afid=0x0000000000000040,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',mmap,subj_type=(\'},subj_type=/dev/dri/card#\x00,obj_role=,obj_role=v,obj_user=/dev/dri/card#\x00,hash,appraise,appraise_type=imasig,uid=', @ANYRESDEC=r1, @ANYBLOB=',subj_user=,\x00']) 03:00:31 executing program 0: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x2000) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:31 executing program 4: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x6, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x4, 0x0, 0xc, 0x2, 0x8, 0x80, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff0001}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}], &(0x7f00000002c0)='syzkaller\x00', 0xffffff81, 0x0, 0x0, 0x41000, 0x7, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0xfa64, 0x3405}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x1, 0x2, 0xb, 0x4, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0xa3, &(0x7f0000000140)=""/163, 0x41000, 0xc, [], 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0xd2b8, 0x7f}, 0x10, 0x0, r0}, 0x78) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) write$cgroup_devices(r1, &(0x7f0000000480)={'c', ' *:* ', 'w\x00'}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080), 0x10) 03:00:31 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) 03:00:31 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3800002, 0x3ffffff, r1, 0xbbb3) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000003c0)={0x1, 0xfe0a, @status={[0x2, 0x0, 0x7, 0x3, 0xffff, 0x8]}, [0x4, 0x9, 0x1bf, 0x7fffffff, 0x6, 0xc4e, 0x0, 0x9, 0xfff, 0x87, 0x4be, 0x6, 0x1ff, 0x8, 0x200, 0x7fff, 0x6, 0x101, 0x7, 0x9, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x2, 0x8, 0xb9, 0x5, 0xd89, 0x4, 0x3ff, 0xfffffffffffffffa, 0x0, 0xfffffffffffffffe, 0x1, 0xc1f, 0x101, 0x80000000, 0xffffffffffffffe1, 0x8000, 0xc3, 0x3, 0x9, 0x8000, 0xfffffffffffffffc, 0x6, 0x7ff, 0x2, 0x2, 0x4, 0x0, 0x0, 0x4, 0x8, 0x3, 0x3, 0x100, 0x3, 0x2, 0x3f, 0x7985, 0xfffffffffffffff8, 0x9755, 0x1, 0x0, 0x9]}) 03:00:31 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) getuid() 03:00:31 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x210000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) 03:00:31 executing program 5: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x20010, 0xffffffffffffffff, 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x10001, 0x201) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 03:00:31 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x40, 0x8}, {0x5b68, 0x101, 0x3, 0x7}}}}, 0x15) 03:00:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x430900) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"4c642084b1f66d64f4d8b64b099f215f", 0x0, 0x0, {0x10001, 0x6}, {0x261a0dda, 0x3}, 0xc80, [0x6, 0xba, 0x101, 0x3, 0x1, 0x0, 0x57, 0x95, 0x4, 0x7, 0x2, 0xee6d, 0x800000000000000, 0x2, 0x4, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000003c0)={{r0}, r1, 0x4, @inherit={0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000300000000000000ff7f00000000000009000000000000001e000000000000000000000000000000ffffffff0000000000010000000000000300000000000000200000000000000006000500000000000200000000000000e20c93dd0dd414935450a2605e2af4bb885a96dca0c3e19c18eb4c35fa11ac12d6db37592c00afc3f1"]}, @name="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"}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/140, 0x8c}], 0x1, &(0x7f0000001480)=""/13, 0xd}, 0x2102) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 03:00:31 executing program 5: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) 03:00:31 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) mmap$perf(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x81) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') pkey_free(r0) 03:00:31 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040), 0x4000000000000026}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x6, 0x7, 0x6, 0xf618, 0x9, 0xfffffffe, 0x0, 0x0, 0x4, 0x4, 0x2}) 03:00:31 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 03:00:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x81) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xc048884) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x1055c3) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 03:00:31 executing program 3: setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x9, 0x4) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1643.302056] Bluetooth: Unexpected start frame (len 16) [ 1643.307670] Bluetooth: Unknown LE signaling command 0x17 [ 1643.313160] Bluetooth: Wrong link type (-22) [ 1643.319707] ================================================================== [ 1643.327299] BUG: KASAN: use-after-free in hci_send_acl+0xcf4/0xe90 [ 1643.333665] Read of size 8 at addr ffff8880abb60d98 by task kworker/u5:0/1676 [ 1643.340943] [ 1643.342575] CPU: 0 PID: 1676 Comm: kworker/u5:0 Not tainted 4.14.217-syzkaller #0 03:00:31 executing program 4: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x51}, @l2cap_cid_signaling={{0x4d}, [@l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x6, 0x4, 0x1f}}, @l2cap_conf_req={{0x4, 0x0, 0x2c}, {0x1ff, 0x100, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x8, 0x1, 0x0, 0x20}}, @l2cap_conf_efs={0x6, 0x10, {0x85, 0x1, 0x7, 0x8, 0x0, 0xb369}}, @l2cap_conf_ews={0x7, 0x2, 0x3ff}]}}, @l2cap_cmd_rej_unk={{0x1, 0x92, 0x2}, {0x1a30}}, @l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x9, 0x1071}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x401}}]}}, 0x56) [ 1643.350226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.359595] Workqueue: hci0 hci_rx_work [ 1643.363592] Call Trace: [ 1643.366185] dump_stack+0x1b2/0x281 [ 1643.369851] print_address_description.cold+0x54/0x1d3 [ 1643.375154] kasan_report_error.cold+0x8a/0x191 [ 1643.379840] ? hci_send_acl+0xcf4/0xe90 [ 1643.383916] __asan_report_load8_noabort+0x68/0x70 [ 1643.388862] ? rcu_read_lock_sched_held+0x130/0x1d0 [ 1643.393890] ? hci_send_acl+0xcf4/0xe90 [ 1643.397904] hci_send_acl+0xcf4/0xe90 03:00:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"6b7ac9ae4ce51ca89a81086e1b4f04eb", 0x0, 0x0, {0x40, 0x80000000}, {0x8, 0x5}, 0x8, [0x9, 0xfffffffffffffffc, 0x8, 0x8080, 0x3, 0x9, 0x7, 0x6, 0x800, 0x9, 0x3, 0x8000000000000000, 0x200, 0x3, 0x3, 0x7]}) pkey_mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) [ 1643.401718] ? memset+0x20/0x40 [ 1643.405016] ? __alloc_skb+0x3dc/0x510 [ 1643.408921] l2cap_send_cmd+0x69c/0x8d0 [ 1643.412925] l2cap_recv_frame+0x2a3b/0x9360 [ 1643.417272] ? kmem_cache_free+0x7c/0x2b0 [ 1643.421623] ? kfree_skbmem+0x98/0x100 [ 1643.425542] ? kfree_skb+0xf4/0x390 [ 1643.429200] ? l2cap_recv_acldata+0x686/0xa30 [ 1643.433703] ? hci_rx_work+0x403/0xb40 [ 1643.437813] ? process_one_work+0x793/0x14a0 [ 1643.442234] ? worker_thread+0x5cc/0xff0 [ 1643.446326] ? kthread+0x30d/0x420 03:00:31 executing program 0: pkey_alloc(0x0, 0x3) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff) 03:00:31 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r0, 0x4) pkey_mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) [ 1643.449870] ? ret_from_fork+0x24/0x30 [ 1643.453770] ? lock_acquire+0x170/0x3f0 [ 1643.457753] ? l2cap_ertm_init+0xb70/0xb70 [ 1643.462007] ? l2cap_conn_unreliable.constprop.0+0x37/0x1b0 [ 1643.467766] ? __mutex_lock+0x360/0x1310 [ 1643.471844] ? l2cap_recv_acldata+0x6e6/0xa30 [ 1643.476355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1643.481837] ? lock_downgrade+0x740/0x740 [ 1643.486001] ? __mutex_unlock_slowpath+0x75/0x770 [ 1643.490937] ? kfree_skbmem+0x98/0x100 [ 1643.494836] ? rcu_read_lock_sched_held+0x16c/0x1d0 03:00:31 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x20, 0x70bd2a, 0x1, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0054fe8436f47870b32aeeff06e176c25ab286e2977e0d91d1436b78de0f876a52bb6beee26a035987d89f2ad8e33d5dcbfea3b5629c514fdd92eed4b4b03f6cccf76802493d9eba4643f7a1a4a18f69b286411335b0fe2b950be942200bdf813fc1254309f038dae366d8a200"/119, @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf2501000000080002000000000008000200070000000800030002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000000) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c85049004500010006030400570006000c040500d9d20600060e0003000200410dff0800000004008600c3000c200500200003000003000000000006000000070304004df10500"], 0x4e) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) [ 1643.499886] ? wait_for_completion_io+0x10/0x10 [ 1643.504568] l2cap_recv_acldata+0x8f9/0xa30 [ 1643.508908] hci_rx_work+0x403/0xb40 [ 1643.512635] process_one_work+0x793/0x14a0 [ 1643.516876] ? work_busy+0x320/0x320 [ 1643.520604] ? worker_thread+0x158/0xff0 [ 1643.524678] ? _raw_spin_unlock_irq+0x24/0x80 [ 1643.529302] worker_thread+0x5cc/0xff0 [ 1643.533236] ? rescuer_thread+0xc80/0xc80 [ 1643.537397] kthread+0x30d/0x420 [ 1643.540849] ? kthread_create_on_node+0xd0/0xd0 [ 1643.545662] ret_from_fork+0x24/0x30 [ 1643.549471] 03:00:32 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28}, 0x10) 03:00:32 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82, 0x0) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x1, 0x7, 0x1a0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x40) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r0}, 0xc) [ 1643.551093] Allocated by task 8054: [ 1643.554720] kasan_kmalloc+0xeb/0x160 [ 1643.558527] kmem_cache_alloc_trace+0x131/0x3d0 [ 1643.563192] hci_chan_create+0x8b/0x3a0 [ 1643.567166] l2cap_conn_add.part.0+0x18/0xc30 [ 1643.571802] l2cap_connect_cfm+0x526/0xdb0 [ 1643.576041] hci_le_meta_evt+0x369e/0x4410 [ 1643.580460] hci_event_packet+0x2217/0x7510 [ 1643.584783] hci_rx_work+0x427/0xb40 [ 1643.588500] process_one_work+0x793/0x14a0 [ 1643.592741] worker_thread+0x5cc/0xff0 [ 1643.596632] kthread+0x30d/0x420 03:00:32 executing program 5: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') socketpair(0x34, 0x1, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x3ffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x20, 0x41, 0x3, 0x0, 0x0, 0xa5, 0x50941, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf5a3, 0x4, @perf_config_ext={0x10000, 0x1}, 0x100c, 0x9, 0x2, 0x2, 0x200, 0xffff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x5, 0x83, 0xb1, 0x7, 0x0, 0x8, 0xa000b, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x49ba2, 0x2, 0xd5c, 0x0, 0x2, 0xfffff001, 0x8006}, 0x0, 0x6, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) 03:00:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={0x0, 0x37, 0x7, 0x401, 0x5e10, 0x4, 0x5, 0x1, 0x5, 0xc23, 0xffff0001, 0x8f}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x16, 0x1, 0x8000, &(0x7f0000000040)=[0x0], 0x1}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x7) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 1643.600034] ret_from_fork+0x24/0x30 [ 1643.603739] [ 1643.605359] Freed by task 1676: [ 1643.608640] kasan_slab_free+0xc3/0x1a0 [ 1643.612628] kfree+0xc9/0x250 [ 1643.615748] hci_disconn_loglink_complete_evt.isra.0+0x1c1/0x230 [ 1643.621991] hci_event_packet+0x3444/0x7510 [ 1643.626321] hci_rx_work+0x427/0xb40 [ 1643.630050] process_one_work+0x793/0x14a0 [ 1643.634297] worker_thread+0x5cc/0xff0 [ 1643.638204] kthread+0x30d/0x420 [ 1643.641577] ret_from_fork+0x24/0x30 [ 1643.645286] [ 1643.646916] The buggy address belongs to the object at ffff8880abb60d80 [ 1643.646916] which belongs to the cache kmalloc-128 of size 128 [ 1643.659675] The buggy address is located 24 bytes inside of [ 1643.659675] 128-byte region [ffff8880abb60d80, ffff8880abb60e00) [ 1643.671478] The buggy address belongs to the page: [ 1643.676416] page:ffffea0002aed800 count:1 mapcount:0 mapping:ffff8880abb60000 index:0xffff8880abb60c00 [ 1643.686034] flags: 0xfff00000000100(slab) [ 1643.690210] raw: 00fff00000000100 ffff8880abb60000 ffff8880abb60c00 0000000100000014 [ 1643.698276] raw: ffffea0002754260 ffffea00028d61e0 ffff88813fe80640 0000000000000000 [ 1643.706167] page dumped because: kasan: bad access detected [ 1643.711880] [ 1643.713509] Memory state around the buggy address: [ 1643.718475] ffff8880abb60c80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1643.725844] ffff8880abb60d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1643.733404] >ffff8880abb60d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1643.740782] ^ [ 1643.744940] ffff8880abb60e00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1643.752323] ffff8880abb60e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1643.759686] ================================================================== [ 1643.767050] Disabling lock debugging due to kernel taint [ 1643.777739] Kernel panic - not syncing: panic_on_warn set ... [ 1643.777739] [ 1643.785259] CPU: 0 PID: 1676 Comm: kworker/u5:0 Tainted: G B 4.14.217-syzkaller #0 [ 1643.794097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:00:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xc41, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x9}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x2, 0x7fff, 0x1, 0x3f, 0x7, 0x6}) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 03:00:32 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x4c) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 03:00:32 executing program 3: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x6, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) gettid() 03:00:32 executing program 1: syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000040)=0x6e, 0x40000) r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r0, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004895) syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x361}, 0x8) 03:00:32 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x282a01, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x28000001) socketpair(0x10, 0x800, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x100}, 0x80) syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x28000) pkey_mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) [ 1643.803469] Workqueue: hci0 hci_rx_work [ 1643.807486] Call Trace: [ 1643.810083] dump_stack+0x1b2/0x281 [ 1643.813727] panic+0x1f9/0x42d [ 1643.816949] ? add_taint.cold+0x16/0x16 [ 1643.820932] ? ___preempt_schedule+0x16/0x18 [ 1643.825354] kasan_end_report+0x43/0x49 [ 1643.829422] kasan_report_error.cold+0xa7/0x191 [ 1643.834124] ? hci_send_acl+0xcf4/0xe90 [ 1643.838108] __asan_report_load8_noabort+0x68/0x70 [ 1643.843053] ? rcu_read_lock_sched_held+0x130/0x1d0 [ 1643.848079] ? hci_send_acl+0xcf4/0xe90 [ 1643.852060] hci_send_acl+0xcf4/0xe90 [ 1643.856244] ? memset+0x20/0x40 [ 1643.859550] ? __alloc_skb+0x3dc/0x510 [ 1643.863443] l2cap_send_cmd+0x69c/0x8d0 [ 1643.867425] l2cap_recv_frame+0x2a3b/0x9360 [ 1643.871756] ? kmem_cache_free+0x7c/0x2b0 [ 1643.875907] ? kfree_skbmem+0x98/0x100 [ 1643.879796] ? kfree_skb+0xf4/0x390 [ 1643.884378] ? l2cap_recv_acldata+0x686/0xa30 [ 1643.888898] ? hci_rx_work+0x403/0xb40 [ 1643.892790] ? process_one_work+0x793/0x14a0 [ 1643.897202] ? worker_thread+0x5cc/0xff0 [ 1643.901270] ? kthread+0x30d/0x420 03:00:32 executing program 5: mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x3ffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x8) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0x81, 0x8, 0x2, 0x0, 0x3, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x80}, 0x3df16c2ea99f9193, 0xf345, 0x5, 0x3, 0x1f, 0x7fffffff, 0x401}, 0x0, 0xe, 0xffffffffffffffff, 0xa) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80400, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x80, 0x2, 0x5, 0x80, 0x0, 0xe4bd, 0xa0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x80}, 0x106, 0xfffffffffffffffc, 0x10001, 0x0, 0x4, 0x6, 0x50}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) getpeername(r2, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000280)=0x80) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x400) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r5, 0x7) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nvram\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x84420, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@fscache='fscache'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/nvram\x00'}}]}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r4) [ 1643.904818] ? ret_from_fork+0x24/0x30 [ 1643.908709] ? lock_acquire+0x170/0x3f0 [ 1643.912686] ? l2cap_ertm_init+0xb70/0xb70 [ 1643.916933] ? l2cap_conn_unreliable.constprop.0+0x37/0x1b0 [ 1643.922653] ? __mutex_lock+0x360/0x1310 [ 1643.926730] ? l2cap_recv_acldata+0x6e6/0xa30 [ 1643.931234] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1643.936690] ? lock_downgrade+0x740/0x740 [ 1643.940853] ? __mutex_unlock_slowpath+0x75/0x770 [ 1643.945707] ? kfree_skbmem+0x98/0x100 [ 1643.949605] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1643.954667] ? wait_for_completion_io+0x10/0x10 [ 1643.959614] l2cap_recv_acldata+0x8f9/0xa30 [ 1643.964069] hci_rx_work+0x403/0xb40 [ 1643.967800] process_one_work+0x793/0x14a0 [ 1643.972150] ? work_busy+0x320/0x320 [ 1643.975962] ? worker_thread+0x158/0xff0 [ 1643.980037] ? _raw_spin_unlock_irq+0x24/0x80 [ 1643.984771] worker_thread+0x5cc/0xff0 [ 1643.988676] ? rescuer_thread+0xc80/0xc80 [ 1643.992836] kthread+0x30d/0x420 [ 1643.996209] ? kthread_create_on_node+0xd0/0xd0 [ 1644.000889] ret_from_fork+0x24/0x30 [ 1644.005223] Kernel Offset: disabled [ 1644.008981] Rebooting in 86400 seconds..